webhooks
Get Webhook Log Attachment
Serve one attachment captured at webhook reception time.
Defence layers, in order:
- Ownership check — log must belong to the current user (404 otherwise; no enumeration oracle).
- DB cross-check — the requested filename must appear in the
attachmentsJSONB column of that log row. Prevents serving a residual file someone else dropped in the per-log directory. resolve_attachment_path— path-traversal-safe lookup that confirms the file lives inside ATTACHMENT_ROOT.Content-Typetaken from the JSONB row (set by the Graph metadata at capture time), not re-guessed from the extension.Content-Disposition: inlineonly for PDF and images, so the dashboard can iframe-preview them; everything else downloads to disk.
GET
Get Webhook Log Attachment
Related topics
Get Webhook Log By IdGet Webhook Log BodyWebhooksList Webhook LogsRetrigger Webhook LogGet Webhook Log Attachment