{"action":"created","issue":{"url":"https://api.github.com/repos/cloudevents/spec/issues/155","repository_url":"https://api.github.com/repos/cloudevents/spec","labels_url":"https://api.github.com/repos/cloudevents/spec/issues/155/labels{/name}","comments_url":"https://api.github.com/repos/cloudevents/spec/issues/155/comments","events_url":"https://api.github.com/repos/cloudevents/spec/issues/155/events","html_url":"https://github.com/cloudevents/spec/pull/155","id":313546588,"number":155,"title":"HTTP WebHook Specification","user":{"login":"clemensv","id":542030,"avatar_url":"https://avatars0.githubusercontent.com/u/542030?v=4","gravatar_id":"","url":"https://api.github.com/users/clemensv","html_url":"https://github.com/clemensv","followers_url":"https://api.github.com/users/clemensv/followers","following_url":"https://api.github.com/users/clemensv/following{/other_user}","gists_url":"https://api.github.com/users/clemensv/gists{/gist_id}","starred_url":"https://api.github.com/users/clemensv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clemensv/subscriptions","organizations_url":"https://api.github.com/users/clemensv/orgs","repos_url":"https://api.github.com/users/clemensv/repos","events_url":"https://api.github.com/users/clemensv/events{/privacy}","received_events_url":"https://api.github.com/users/clemensv/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-04-12T01:45:36Z","updated_at":"2018-04-21T23:53:33Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/cloudevents/spec/pulls/155","html_url":"https://github.com/cloudevents/spec/pull/155","diff_url":"https://github.com/cloudevents/spec/pull/155.diff","patch_url":"https://github.com/cloudevents/spec/pull/155.patch"},"body":"This PR complements https://github.com/cloudevents/spec/pull/148 \r\n\r\nThis specification is a *generic* specification that formalizes delivery of notifications over HTTP, generally known as \"Web hooks\". The HTTP transport binding for Cloud Events composes with this specification for one-way event delivery.\r\n\r\nThe specification defines that notifications are delivered by HTTP POST, must use a token-based authNZ scheme either carried in the Authorization header or the query string, and strongly suggests implementation of a pre-flight handshake (similar to [W3C CORS](www.w3.org/TR/cors/)) that protects a sender from being abused as a distributed denial of service machine gun.\r\n\r\nThis specification would probably be best proposed to IETF, but here's a good place to start with the draft.\r\n\r\nThis is not relevant to the 0.1 of the core spec, but is relevant to the interop group\r\n\r\nSigned-off-by: Clemens Vasters <clemensv@microsoft.com>"},"comment":{"url":"https://api.github.com/repos/cloudevents/spec/issues/comments/383342049","html_url":"https://github.com/cloudevents/spec/pull/155#issuecomment-383342049","issue_url":"https://api.github.com/repos/cloudevents/spec/issues/155","id":383342049,"user":{"login":"glennblock","id":141124,"avatar_url":"https://avatars0.githubusercontent.com/u/141124?v=4","gravatar_id":"","url":"https://api.github.com/users/glennblock","html_url":"https://github.com/glennblock","followers_url":"https://api.github.com/users/glennblock/followers","following_url":"https://api.github.com/users/glennblock/following{/other_user}","gists_url":"https://api.github.com/users/glennblock/gists{/gist_id}","starred_url":"https://api.github.com/users/glennblock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glennblock/subscriptions","organizations_url":"https://api.github.com/users/glennblock/orgs","repos_url":"https://api.github.com/users/glennblock/repos","events_url":"https://api.github.com/users/glennblock/events{/privacy}","received_events_url":"https://api.github.com/users/glennblock/received_events","type":"User","site_admin":false},"created_at":"2018-04-21T23:53:33Z","updated_at":"2018-04-21T23:53:33Z","author_association":"NONE","body":"Good to see this @clemensv! Webhooks are a central part of the products I work on. Today whenever the term Webhook comes up it is understood as a general pattern. There are rules of the road, but they haven't really been written, thus this is nice to see. I'll add some comments to the draft as appropriate.\r\n\r\nAs to the products, [Webtask.io](https://webtask.io) is a free developer tool / environment for creating Serverless endpoints. Webhooks are one of the most common use cases. Webtask is generally the backend for handing notifications from a Service that fires off events, Github, Slack, and Stripe are three of the very common use case both for receiving and invoking.\r\n\r\nSecond we have a premium product [Extend](https://auth0.com/extend/developers) which is a Serverless Webhook platform which can be \"embedded\" within a SaaS product to allow users to have a native experience within the product for handling application events."}}
{"actor":{"display_login":"glennblock"}}