A lightweight and flexible webhook server built with Rust and Actix Web for receiving, caching, and broadcasting webhooks via WebSockets.

• General-purpose webhook receiver
• GitHub webhook support with signature verification
• WebSocket broadcasting of received webhooks
• Recent events cache with REST API access
• Authentication for WebSocket and REST API connections
• Environment variable configuration
• Prometheus metrics endpoint for monitoring

struct TimestampedEvent {
    timestamp: u64,         // Unix timestamp in milliseconds
    payload: Value,         // The webhook payload (JSON)
    event_type: Option<String>,  // Optional event type (for GitHub webhooks)
}

The server exposes Prometheus metrics at the /metrics endpoint. Key metrics include:

Example Prometheus query to count GitHub push events:

webhook_server_github_events_by_type{event_type="push"}

Additionally, standard HTTP metrics are provided by the Actix Web Prometheus integration.

Authentication is done using Bearer tokens in the HTTP Authorization header. Set the CLIENT_SECRET environment variable to enable authentication.

Example:

Authorization: Bearer your-secret-token

GitHub webhooks are verified using the x-hub-signature-256 header. Set the WEBHOOK_SECRET environment variable with the same secret configured in your GitHub webhook settings.

# Set environment variables
export PORT=9000
export CLIENT_SECRET=your-client-token
export WEBHOOK_SECRET=your-github-webhook-secret
export MAX_CACHED_EVENTS=200

# Run the server
cargo run

1. Go to your GitHub repository settings
2. Navigate to Webhooks > Add webhook
3. Set the Payload URL to https://your-server.com/github
4. Set the Content type to application/json
5. Set the Secret to the same value as your WEBHOOK_SECRET environment variable
6. Select the events you want to receive
7. Enable SSL verification

// JavaScript example
const socket = new WebSocket('wss://your-server.com/ws');

// Add authorization header
socket.addEventListener('open', function (event) {
    socket.send('Authorization: Bearer your-client-token');
});

// Listen for messages
socket.addEventListener('message', function (event) {
    const data = JSON.parse(event.data);
    console.log('Received webhook:', data);
});

curl -H "Authorization: Bearer your-client-token" https://your-server.com/recent-events

# Scrape metrics directly
curl https://your-server.com/metrics

# Add to Prometheus configuration
scrape_configs:
  - job_name: 'webhook_server'
    scrape_interval: 15s
    static_configs:
      - targets: ['your-server.com:8080']

cargo build --release

docker build -t webhook-server .
docker run -p 8080:8080 \
  -e PORT=8080 \
  -e CLIENT_SECRET=your-client-token \
  -e WEBHOOK_SECRET=your-github-webhook-secret \
  -e MAX_CACHED_EVENTS=100 \
  webhook-server

MIT