Skip to content

Fix/four issues jobsunday002#1226

Merged
miss-yusrah merged 4 commits into
NovaGrids:mainfrom
josunday002:fix/four-issues-jobsunday002
Jun 29, 2026
Merged

Fix/four issues jobsunday002#1226
miss-yusrah merged 4 commits into
NovaGrids:mainfrom
josunday002:fix/four-issues-jobsunday002

Conversation

@josunday002

Copy link
Copy Markdown
Contributor

closes #1128
closes #1148
closes #1149
closes #1151
Webhooks are unsigned. Any HTTP server could spoof VaultDAO webhook payloads. Retry uses a fixed interval and has no dead-letter mechanism.
Every proposal query hits the Stellar RPC. There's no local index. Full-text search on proposal descriptions requires fetching all proposals first
Webhooks are unsigned. Any HTTP server could spoof VaultDAO webhook payloads. Retry uses a fixed interval and has no dead-letter mechanism.

…orts

Boards and governance committees need reports delivered automatically
without manual action. Adds schedule creation UI with frequency selection
(weekly/monthly), recipient management, and localStorage persistence.
Every proposal query previously hit the Stellar RPC with no local index.
Adds FTS5 virtual table with auto-sync triggers, ranked search across
proposal_id/activity_type/actor/data, scoped search by proposal, and
an index rebuild utility for bulk imports.
Webhooks now include X-VaultDAO-Timestamp and X-VaultDAO-Delivery-Id
headers. Signature computation includes the timestamp to prevent replay
attacks. Adds exported verifyWebhookSignature utility with timing-safe
comparison and configurable max-age window (default 5 min).
Failed deliveries after all retries are now captured in a dead-letter
queue instead of being silently dropped. Adds replay, per-webhook
filtering, single-entry removal, and bulk purge operations so operators
can investigate and retry failed payloads.
@drips-wave

drips-wave Bot commented Jun 29, 2026

Copy link
Copy Markdown

@josunday002 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@josunday002
josunday002 force-pushed the fix/four-issues-jobsunday002 branch from b354549 to 8570d91 Compare June 29, 2026 17:29
@miss-yusrah
miss-yusrah merged commit abe9833 into NovaGrids:main Jun 29, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants