Slack Notifications (to RocketChat) are no longer working about medusa HOT 5 OPEN

I think the best solution is to add a domain whitelist for the webhook requests. I will get to it when I have some time or maybe someone else can pick this up and submit a PR.

from medusa.

What does the webhook URL look like (remove the sensitive parts)?

from medusa.

I've randomized the sensitive bits. NOTE: I've tried with and without a trailing /

http://rocketchat.abc.defg.hij:3000/hooks/56305c4ab173e84efb916e6c/jRpTnrtGnBErdTmbkMwMbbyoSMknGiy4JyqcSxWBR373Z2R4

from medusa.

Webhook URLs need to be validated for security reasons, see: #11565
What is the Webhook pattern we need to support for Rocketchat?

from medusa.

(from the PR) WEBHOOK_PATTERN = r'https://hooks\.slack\.com/services/.*'
This definitely isn't going to work with RocketChat since it can be self-hosted (as it is in my case) so it will never be on slack.com

I'm not familiar with the Python RegEx syntax but it's basically http or https:// with a host.domain (with optional port) and then /hooks/' and the token which is generated, here is one I generated for an example (it's a real one that I'm deleting right away) 65e1f75c00ab53363395d0aa/2yXaxN6k566kPLAvmsKxeSE4L6mxLfzgi6GKovaSC2kE7GJk`

https://rocketchat.domain/hooks/65e1f75c00ab53363395d0aa/2yXaxN6k566kPLAvmsKxeSE4L6mxLfzgi6GKovaSC2kE7GJk
http://rocketchat.domain:port/hooks/65e1f75c00ab53363395d0aa/2yXaxN6k566kPLAvmsKxeSE4L6mxLfzgi6GKovaSC2kE7GJk

Docs on RocketChat integrations, message syntax can be identical to Slack's but it also supports additional features.
https://docs.rocket.chat/use-rocket.chat/workspace-administration/integrations

from medusa.