Files
patrickandClaude Sonnet 5.5 7958102870
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m4s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 4s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 4s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 25s
CI / Web (dms-browser) (push) Failing after 1m31s
CI / Web (pdf-viewer) (push) Failing after 1m2s
CI / Web (shl) (push) Failing after 12s
Connect-Schnittstellen-Vertragstests / contract-tests (push) Successful in 10m0s
Supply-Chain-Scan (Go) / govulncheck (push) Failing after 45s
CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m4s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 3s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 3s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 25s
CI / Web (dms-browser) (pull_request) Failing after 1m33s
CI / Web (pdf-viewer) (pull_request) Failing after 1m4s
CI / Web (shl) (pull_request) Failing after 15s
Connect-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 11m18s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 10m25s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 1m0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 2m4s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 3m28s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 10m55s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Failing after 3s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Failing after 3s
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
connect: auditclient, httpclient, policyclient aus common v0.1.0
auditclient und policyclient aus der Liste in check-security-test-coverage.sh
entfernt (Pakete liegen jetzt in common, dort durch das common-Gate gedeckt).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-27 23:33:13 +01:00

109 lines
3.6 KiB
Go

// Package webhookclient ist ein schlanker HTTP-Client fuer Core API-07
// (internal/webhook, zentrale Webhook-Registry). Connect ist ein physisch
// getrenntes Go-Modul und kann Cores internal/webhook daher nicht direkt
// importieren -- nur ueber dessen HTTP-Schnittstelle (gleiches Muster wie
// connect/internal/auditclient fuer AUD-08 und dms/internal/retentionclient
// fuer Archive RET-05).
package webhookclient
import (
"bytes"
"context"
"encoding/json"
"fmt"
"net/http"
"net/url"
"time"
"gitea.perlbach24.de/scripte/nexarch/common/httpclient"
)
type Client struct {
BaseURL string
ServiceToken string
HTTPClient *http.Client
}
func New(baseURL, serviceToken string) *Client {
return &Client{BaseURL: baseURL, ServiceToken: serviceToken, HTTPClient: httpclient.Default()}
}
// Subscription spiegelt Core API-07s Antwort auf eine Registrierung.
type Subscription struct {
ID string `json:"id"`
EventType string `json:"event_type"`
TargetURL string `json:"target_url"`
CreatedAt time.Time `json:"created_at"`
}
type subscribeRequest struct {
TenantSlug string `json:"tenant_slug"`
EventType string `json:"event_type"`
TargetURL string `json:"target_url"`
Secret string `json:"secret"`
}
// Subscribe registriert targetURL bei Core API-07 fuer eventType. Jeder
// Fehler (Transport, Timeout, Nicht-2xx) wird als Fehler zurueckgegeben --
// der Aufrufer entscheidet, ob/wie er das nachbehandelt (Akzeptanzkriterium
// 1).
func (c *Client) Subscribe(ctx context.Context, tenantSlug, eventType, targetURL, secret string) (Subscription, error) {
body, err := json.Marshal(subscribeRequest{
TenantSlug: tenantSlug, EventType: eventType, TargetURL: targetURL, Secret: secret,
})
if err != nil {
return Subscription{}, fmt.Errorf("webhookclient: request kodieren: %w", err)
}
req, err := http.NewRequestWithContext(ctx, http.MethodPost, c.BaseURL+"/webhooks/subscriptions", bytes.NewReader(body))
if err != nil {
return Subscription{}, fmt.Errorf("webhookclient: request bauen: %w", err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("X-Service-Token", c.ServiceToken)
resp, err := c.httpClient().Do(req)
if err != nil {
return Subscription{}, fmt.Errorf("webhookclient: aufruf fehlgeschlagen: %w", err)
}
defer func() { _ = resp.Body.Close() }()
if resp.StatusCode != http.StatusCreated {
return Subscription{}, fmt.Errorf("webhookclient: unerwarteter status %d", resp.StatusCode)
}
var out Subscription
if err := json.NewDecoder(resp.Body).Decode(&out); err != nil {
return Subscription{}, fmt.Errorf("webhookclient: antwort dekodieren: %w", err)
}
return out, nil
}
// Unsubscribe entfernt subscriptionID vollstaendig aus Core API-07
// (Akzeptanzkriterium 3).
func (c *Client) Unsubscribe(ctx context.Context, tenantSlug, subscriptionID string) error {
target := c.BaseURL + "/webhooks/subscriptions/" + url.PathEscape(subscriptionID) +
"?tenant_slug=" + url.QueryEscape(tenantSlug)
req, err := http.NewRequestWithContext(ctx, http.MethodDelete, target, nil)
if err != nil {
return fmt.Errorf("webhookclient: request bauen: %w", err)
}
req.Header.Set("X-Service-Token", c.ServiceToken)
resp, err := c.httpClient().Do(req)
if err != nil {
return fmt.Errorf("webhookclient: aufruf fehlgeschlagen: %w", err)
}
defer func() { _ = resp.Body.Close() }()
if resp.StatusCode != http.StatusNoContent {
return fmt.Errorf("webhookclient: unerwarteter status %d", resp.StatusCode)
}
return nil
}
func (c *Client) httpClient() *http.Client {
if c.HTTPClient != nil {
return c.HTTPClient
}
return httpclient.Default()
}