ffb27acc11
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
GHL signs x-wh-signature webhooks with an Ed25519 key from the Marketplace app settings, not RSA. The previous RSA implementation caused all webhook signature checks to fail, blocking every outbound SMS send. Changes: - Replace parseRSAPublicKey + RSA verification with parseEd25519PublicKey + ed25519.Verify for x-wh-signature - Both x-wh-signature (current) and X-GHL-Signature (July 2026) now use the same Ed25519 key from GHL_WEBHOOK_PUBLIC_KEY - Remove unused crypto/rsa, crypto/sha256, crypto imports - Update webhook_test.go to generate/sign with Ed25519 instead of RSA Co-Authored-By: Paperclip <noreply@paperclip.ing>