mirror of
https://github.com/qingchencloud/clawpanel.git
synced 2026-06-24 09:04:08 +08:00
Channel save removed signing_secret from YAML (matching app_token migration) but never wrote it to ~/.hermes/.env. Saving Slack config from the panel permanently wiped the signing secret, breaking webhook signature verification. Read path now prefers SLACK_SIGNING_SECRET from env, matching bot/app tokens. Co-authored-by: 晴天 <1186258278@users.noreply.github.com>