Webhooks

The two webhooks are not below /api. They take no API token. Each one checks its own secret.

A webhook is a request that a different system sends to Ferry to start a deploy. The webhooks are outside /api. They never take an API token.

The two webhooks

Webhook	Path	Its secret	Trigger of the deploy
Deploy hook	`/hooks/deploy/{service_id}`	The key in the URL	`deploy_hook`
GitHub webhook	`/hooks/github`	The signature of the delivery	`webhook`

Call the API from a browser

EventSource cannot set headers, and ferryd sends no CORS headers. A page must respect two rules.

Deploy hooks

A request to the secret deploy hook URL of a service puts a deploy in the queue.