Skip to main content

Receive a token-authenticated (or open) generic webhook — incl. Docker Hub

POST 
/webhooks/generic/:name

Catch-all receiver for senders with no signature scheme at all — self-hosted / homelab-internal tooling and Docker Hub (which has no native webhook signing).

  • Shared-secret token (or open). Events are persisted with verified=false, trust_mode=token, verify_detail="token ok", and are labeled per their trust level everywhere in the UI and API (ADR-0003).
  • Opt-in and disabled by default. A generic provider does not exist until an operator explicitly creates one; an unknown {name} returns 404.
  • Requires a configured shared-secret token the caller presents — Authorization: Bearer (or a header) preferred, ?token=/path token as a URL fallback (Docker Hub). It authenticates the caller but not the body; constant-time compare; required by default. A bad/missing token returns 403 (ADR-0003).
  • Appropriate only on a trusted network already isolated by Caddy forward_auth / UniFi segmentation.

Request​

Responses​

Accepted and persisted (token-authenticated).