Hacktoberfest 2026:メンテナが10月に向けて印を付けた、オープンで初心者向けの issue。 Hacktoberfest の issue を見る

Outbound webhooks for Discord and Slack

オープン
#33 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る

まだ誰も着手していません。

評価

難易度
5/5
見積もり時間
1週間以上
初心者へのやさしさ
35/100
issue の種類
機能追加
明瞭さ
明確に書かれている
活発さ
活発
技術スタック
javascript, next.js, node.js
領域
api, backend, security

調査の方向性

The issue names no implementation files or tests beyond npm test and node scripts/check-boundary.js. Start by reading the project structure and its existing event, scheduler, and test entry points to understand where webhook delivery belongs. Done means Discord and Slack formatting, signed payloads, retries, SSRF protections, exactly-once delivery, and the specified tests and checks; the issue also asks for a screenshot of a real Discord delivery.

索引モデルが issue の本文から書いたものです。

説明

enhancement help wanted

Communities live in Discord and Slack. Today nothing leaves CodeArena, so a server running a weekly tournament has to announce results by hand.

Design

  • Players who run a tournament, and server admins, can add outbound webhooks with a URL and the events they want.
  • Events:
    • Tournament created, check-in open, started, round finished, winner decided.
    • A player reaching a new rank tier (only when that player has opted in).
    • New problem added to the instance.
  • Built-in formatting for Discord and Slack webhook URLs (embeds and blocks). Any other URL gets a signed JSON payload.

Rules that must hold

  • Signed payloads: X-CodeArena-Signature with HMAC-SHA256 over the raw body and a timestamp, with a documented verification snippet.
  • Delivery: retries with backoff for up to 24 hours, recorded in a delivery log the owner can see. Auto-disable after repeated permanent failures, with a notice to the owner.
  • No SSRF: refuse URLs that resolve to private, loopback or link-local addresses, checked at send time as well as at save time, since DNS can change. Add tests for each blocked range.
  • Exactly once per event per webhook, even if the scheduler or server restarts mid-delivery. Prove it with a test.
  • Nothing private in payloads: no emails, no code, no hidden tests.

Definition of done

  • A real Discord channel receiving tournament events, shown in a screenshot in the pull request.
  • Tests for signing, retries, SSRF rules and exactly-once delivery.
  • npm test and node scripts/check-boundary.js pass.
主要言語
JavaScript
スター
0
フォーク
2
PR マージ指標
30日以内にマージされた PR はありません

環境構築

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

sennaicodes/codearena のほかの issue

sennaicodes/codearena の issue をすべて見る

似ている issue

JavaScript の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。