[preprocessor/webhook] add browsertrix qs secret in config

config/config.go

@@ -47,8 +47,9 @@ type Config struct {
 		NftContractAddress string `toml:"nft_contract_address"`
 	} `toml:"numbers"`
 	Browsertrix struct {
-		User     string `toml:"user"`
-		Password string `toml:"password"`
+		User          string `toml:"user"`
+		Password      string `toml:"password"`
+		WebhookSecret string `toml:"webhook_secret"`
 	} `toml:"browsertrix"`
 }
 

example_config.toml

@@ -47,3 +47,4 @@ nft_contract_address = "0xabc" # Optional
 # app.browsertrix.com
 user = "user"
 password = "password"
+webhook_secret = "random_string" # A random string defined by us for auth in qs

webhook/browsertrix.go

@@ -138,6 +138,12 @@ type CrawlMetadata struct {
 }
 
 func handleBrowsertrixEvent(w http.ResponseWriter, r *http.Request) {
+	webhookSecret := r.URL.Query().Get("s")
+	if webhookSecret != config.GetConfig().Browsertrix.WebhookSecret {
+		writeJsonResponse(w, http.StatusUnauthorized, map[string]string{"error": "invalid secret"})
+		return
+	}
+
 	var e BrowsertrixCrawlFinishedResponse
 	defer r.Body.Close()
 	data, err := io.ReadAll(r.Body)