busbar-export-webhook

First-party signed kind:export plugin cdylib: the request-log WEBHOOK sink (module: request-log-webhook), packaged as a droppable busbar plugin. Drop the signed tarball into plugins/ and name it from an export..module: request-log-webhook block.

kind	alias	crate	busbar	license
export	request-log-webhook	busbar-export-webhook-plugin	1.6.0 (pinned in .busbar-ref)	Apache-2.0

What it is for

busbar-export-webhook is a kind: export busbar plugin.

Config

Configured under the request-log-webhook module name (export.<name>.module: request-log-webhook), with these settings: (unknown keys are refused):

key	default	meaning
url	required	The webhook target. https:// only; refused by the host when it names a loopback, link-local, private, CGNAT or cloud-metadata host.
auth_header	none	{ name, value }: one header sent on every delivery. value is a secret reference ({env:}, {file:}, {module:}); a literal is refused.
max_inflight_deliveries	64	Concurrent deliveries for this instance; at least 1 (the largest instance's bound is validated, and must not exceed usize::MAX >> 3).
delivery_timeout_secs	2	Per-delivery deadline in seconds, from 1 up to 30 years (946080000).

Security notes:

• Only https:// targets are dialled, to public destinations.
• A user:pass@ in the url is not sent in the url: it becomes an Authorization: Basic header.
• An ambiguous url is refused: an @ after the host (a credential holding an unescaped /, ? or #) would be dialled as a host. Percent-encode the credential.
• An auth_header that cannot be sent (an invalid name or value) is refused, as is one named for a framing or connection field (content-length, transfer-encoding, host, connection, te, upgrade, trailer, keep-alive, proxy-connection); validate and open refuse alike.
• Log lines name the target by scheme and host only, and cut the url's parts and the request's credentials from the host's failure text.

Build

cargo build --release -p busbar-export-webhook-plugin --features dropped-in

Tests

cargo test --workspace --locked

License

Apache-2.0. See LICENSE.