Method GetWebhookByID

internal/identity/webhooks.go:157–183

GetWebhookByID returns the webhook iff it's owned by userID. Cross- user reads (or missing rows) return ErrWebhookNotFound — same not-found-on-cross-user convention used elsewhere in the codebase (conversation reads, message reads). The returned Webhook has SigningSecret populated for the delivery

(ctx context.Context, webhookID, userID string)

// worker's benefit; the public API layer scrubs this field before
// responding to GETs.
func (s *Store) GetWebhookByID(ctx context.Context, webhookID, userID string) (*Webhook, error) {
	w := &Webhook{}
	var filtersJSON []byte
	err := s.pool.QueryRow(ctx,
		`SELECT id, user_id, url, description, events, filters,
		        signing_secret, COALESCE(signing_secret_prev, ''),
		        signing_secret_prev_expires_at,
		        enabled, auto_disabled_at, created_at, last_delivered_at
		 FROM webhooks WHERE id = $1 AND user_id = $2`,
		webhookID, userID,
	).Scan(
		&w.ID, &w.UserID, &w.URL, &w.Description, &w.Events, &filtersJSON,
		&w.SigningSecret, &w.SigningSecretPrev,
		&w.SigningSecretPrevExpiresAt,
		&w.Enabled, &w.AutoDisabledAt, &w.CreatedAt, &w.LastDeliveredAt,
	)
	if err != nil {
		if errors.Is(err, pgx.ErrNoRows) {
			return nil, ErrWebhookNotFound
		}
		return nil, err
	}
	if err := json.Unmarshal(filtersJSON, &w.Filters); err != nil {
		return nil, fmt.Errorf("unmarshal filters: %w", err)
	}
	return w, nil
}

// GetWebhookByIDInternal returns the webhook by ID with no ownership
// check. INTERNAL USE ONLY — handler code MUST use GetWebhookByID