webgate 0.3.0__tar.gz → 0.3.2__tar.gz

{webgate-0.3.0 → webgate-0.3.2}/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## v0.3.2 (2026-04-15)
+
+### Features
+
+- **Webhook notifications** -- admin can register HTTPS endpoints that receive a JSON POST when significant events fire. Supported events: `user_login`, `user_login_failed`, `ssh_connect`, `sftp_upload`, `sftp_delete`, `server_added`, `server_deleted`. Each webhook can subscribe to all events (`*`) or a specific subset.
+- **HMAC-SHA256 signing** -- optional shared secret per webhook; the dispatcher signs the body and sends it as `X-Webgate-Signature: sha256=<hex>` so the receiver can verify authenticity.
+- **Test button + delivery telemetry** -- one-click test fire from the admin UI; each webhook row shows the last HTTP status and timestamp.
+
+### Details
+
+- New `Webhook` model + REST CRUD at `/api/webhooks` (admin-only)
+- New `webgate.webhooks.dispatcher.fire(event, data)` -- fire-and-forget, schedules HTTP delivery via `httpx`, never blocks the caller
+- Frontend: "Webhooks" button in the top toolbar (admin only) with full management modal
+- New base dependency: `httpx>=0.28.0` (used by the dispatcher)
+
+Verified end-to-end against a real HTTP echo receiver: `user_login`, `server_added` and a manual test all delivered with HTTP 200 and signature header.
+
+---
+
+## v0.3.1 (2026-04-15)
+
+### Fixed
+
+- **PostgreSQL actually works in Docker now.** v0.3.0 advertised PostgreSQL support but two bugs prevented it from working:
+  1. `asyncpg` was an optional extra (`webgate[postgres]`), so the official Docker image (and `pip install webgate`) didn't have the driver. Now bundled by default.
+  2. Lightweight migrations ran inside the same transaction as `create_all`. PostgreSQL aborts the entire transaction on any error (even when caught), so the first "column already exists" error rolled back table creation on subsequent runs. Each migration now uses its own transaction.
+
+Verified end-to-end against a real `postgres:16-alpine` container: tables created, login works, server creation and persistence across restarts confirmed.
+
+---
+
 ## v0.3.0 (2026-04-15)
 
 ### Features

{webgate-0.3.0 → webgate-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: webgate
-Version: 0.3.0
+Version: 0.3.2
 Summary: Self-hosted web application for remote server management via SSH terminal and SFTP file browser
 Project-URL: Homepage, https://github.com/kalexnolasco/webgate
 Project-URL: Documentation, https://kalexnolasco.github.io/webgate/
@@ -27,10 +27,12 @@ Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: aiofiles>=24.1.0
 Requires-Dist: aiosqlite>=0.21.0
+Requires-Dist: asyncpg>=0.30.0
 Requires-Dist: asyncssh>=2.18.0
 Requires-Dist: bcrypt>=4.2.0
 Requires-Dist: cryptography>=44.0.0
 Requires-Dist: fastapi>=0.115.0
+Requires-Dist: httpx>=0.28.0
 Requires-Dist: passlib[bcrypt]>=1.7.4
 Requires-Dist: pydantic-settings>=2.7.0
 Requires-Dist: pydantic>=2.10.0
@@ -42,8 +44,6 @@ Requires-Dist: slowapi>=0.1.9
 Requires-Dist: sqlalchemy>=2.0.36
 Requires-Dist: uvicorn[standard]>=0.34.0
 Requires-Dist: websockets>=14.0
-Provides-Extra: postgres
-Requires-Dist: asyncpg>=0.30.0; extra == 'postgres'
 Description-Content-Type: text/markdown
 
 # webgate
@@ -457,10 +457,9 @@ All settings are configurable via environment variables with the `WEBGATE_` pref
 
 ### PostgreSQL
 
-SQLite is the default. To use PostgreSQL instead:
+SQLite is the default. To use PostgreSQL, just point `WEBGATE_DB_URL` at it (the `asyncpg` driver is bundled as of v0.3.1):
 
 ```bash
-pip install 'webgate[postgres]'   # adds asyncpg
 export WEBGATE_DB_URL='postgresql+asyncpg://user:pass@host:5432/webgate'
 ```
 
@@ -473,6 +472,21 @@ When adding a server, pick another server from the **Jump Via** dropdown to tunn
 ### SSH command snippets
 
 Each user has a personal library of named commands. They appear as buttons in the terminal toolbar -- click to send `command + Enter`. Right-click to delete, `+` to create. Stored in the `snippets` table.
+
+### Webhooks
+
+Admins can register HTTPS endpoints that receive a JSON POST when events fire (`user_login`, `ssh_connect`, `server_added`, etc). Each webhook can subscribe to all events (`*`) or a specific subset.
+
+```json
+POST https://your-receiver.example.com/wh
+Content-Type: application/json
+X-Webgate-Signature: sha256=<hmac of body using your webhook's secret>
+
+{"event": "ssh_connect", "timestamp": "2026-04-15T18:03:18Z",
+ "data": {"user": "alice", "server": "prod-web-01", "host": "10.0.1.50:22"}}
+```
+
+Manage from the **Webhooks** button in the top toolbar (admin only). Last delivery status is shown next to each row.
 | `WEBGATE_LOG_LEVEL` | `info` | Log level |
 | `WEBGATE_SESSION_TIMEOUT` | `3600` | SSH session timeout (seconds) |
 | `WEBGATE_MAX_UPLOAD_SIZE` | `104857600` | Max upload size (100 MB) |

{webgate-0.3.0 → webgate-0.3.2}/README.md

@@ -409,10 +409,9 @@ All settings are configurable via environment variables with the `WEBGATE_` pref
 
 ### PostgreSQL
 
-SQLite is the default. To use PostgreSQL instead:
+SQLite is the default. To use PostgreSQL, just point `WEBGATE_DB_URL` at it (the `asyncpg` driver is bundled as of v0.3.1):
 
 ```bash
-pip install 'webgate[postgres]'   # adds asyncpg
 export WEBGATE_DB_URL='postgresql+asyncpg://user:pass@host:5432/webgate'
 ```
 
@@ -425,6 +424,21 @@ When adding a server, pick another server from the **Jump Via** dropdown to tunn
 ### SSH command snippets
 
 Each user has a personal library of named commands. They appear as buttons in the terminal toolbar -- click to send `command + Enter`. Right-click to delete, `+` to create. Stored in the `snippets` table.
+
+### Webhooks
+
+Admins can register HTTPS endpoints that receive a JSON POST when events fire (`user_login`, `ssh_connect`, `server_added`, etc). Each webhook can subscribe to all events (`*`) or a specific subset.
+
+```json
+POST https://your-receiver.example.com/wh
+Content-Type: application/json
+X-Webgate-Signature: sha256=<hmac of body using your webhook's secret>
+
+{"event": "ssh_connect", "timestamp": "2026-04-15T18:03:18Z",
+ "data": {"user": "alice", "server": "prod-web-01", "host": "10.0.1.50:22"}}
+```
+
+Manage from the **Webhooks** button in the top toolbar (admin only). Last delivery status is shown next to each row.
 | `WEBGATE_LOG_LEVEL` | `info` | Log level |
 | `WEBGATE_SESSION_TIMEOUT` | `3600` | SSH session timeout (seconds) |
 | `WEBGATE_MAX_UPLOAD_SIZE` | `104857600` | Max upload size (100 MB) |

{webgate-0.3.0 → webgate-0.3.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "webgate"
-version = "0.3.0"
+version = "0.3.2"
 description = "Self-hosted web application for remote server management via SSH terminal and SFTP file browser"
 readme = "README.md"
 license = "MIT"
@@ -40,11 +40,10 @@ dependencies = [
     "slowapi>=0.1.9",
     "pyotp>=2.9.0",
     "qrcode[pil]>=8.2",
+    "asyncpg>=0.30.0",
+    "httpx>=0.28.0",
 ]
 
-[project.optional-dependencies]
-postgres = ["asyncpg>=0.30.0"]
-
 [project.urls]
 Homepage = "https://github.com/kalexnolasco/webgate"
 Documentation = "https://kalexnolasco.github.io/webgate/"

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/app.py

@@ -20,6 +20,7 @@ from webgate.servers.monitor import server_monitor
 from webgate.servers.routes import router as servers_router
 from webgate.snippets.routes import router as snippets_router
 from webgate.terminal.routes import router as terminal_router
+from webgate.webhooks.routes import router as webhooks_router
 
 
 @asynccontextmanager
@@ -91,6 +92,7 @@ def create_app() -> FastAPI:
     app.include_router(terminal_router)
     app.include_router(files_router)
     app.include_router(snippets_router)
+    app.include_router(webhooks_router)
 
     app.mount("/", StaticFiles(directory=str(settings.static_dir), html=True), name="static")
 

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/auth/routes.py

@@ -10,6 +10,7 @@ limiter = Limiter(key_func=get_remote_address)
 
 from webgate.audit.models import AuditOut
 from webgate.audit.service import get_audit_log, log_action
+from webgate.webhooks.dispatcher import fire as fire_webhook
 from webgate.auth.models import (
     ApiKeyCreate,
     ApiKeyCreated,
@@ -88,6 +89,10 @@ def _require_admin(user: UserOut) -> None:
 async def login(request: Request, body: UserLogin, session: SessionDep) -> LoginOut:
     user = await get_user_by_username(session, body.username)
     if not user or not verify_password(body.password, user.hashed_password):
+        await fire_webhook("user_login_failed", {
+            "username": body.username,
+            "ip": request.client.host if request.client else "",
+        })
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid credentials"
         )
@@ -111,6 +116,11 @@ async def login(request: Request, body: UserLogin, session: SessionDep) -> Login
         "login",
         ip_address=request.client.host if request.client else "",
     )
+    await fire_webhook("user_login", {
+        "username": user.username,
+        "user_id": user.id,
+        "ip": request.client.host if request.client else "",
+    })
     return LoginOut(access_token=token)
 
 

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/db/engine.py

@@ -48,15 +48,19 @@ async def init_db() -> None:
     dialect = engine.dialect.name  # "sqlite", "postgresql", ...
     async with engine.begin() as conn:
         await conn.run_sync(Base.metadata.create_all)
-        # Lightweight migrations for columns added after initial release
-        for table, column, sqlite_def, pg_def in _MIGRATIONS:
-            col_def = pg_def if dialect == "postgresql" else sqlite_def
-            sql = f"ALTER TABLE {table} ADD COLUMN {column} {col_def}"
-            try:
+    # Lightweight migrations: each in its OWN transaction. PostgreSQL aborts
+    # the whole transaction on any error (even one we catch), so running
+    # multiple ALTERs in a single txn would poison create_all on a fresh DB
+    # the moment the first "column already exists" fires.
+    for table, column, sqlite_def, pg_def in _MIGRATIONS:
+        col_def = pg_def if dialect == "postgresql" else sqlite_def
+        sql = f"ALTER TABLE {table} ADD COLUMN {column} {col_def}"
+        try:
+            async with engine.begin() as conn:
                 await conn.execute(text(sql))
                 logger.info("Migration applied: %s.%s", table, column)
-            except Exception:
-                pass  # Column already exists
+        except Exception:
+            pass  # Column already exists, or table not yet present on fresh DB
 
 
 async def close_db() -> None:

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/files/routes.py

@@ -26,6 +26,7 @@ from webgate.files.pool import sftp_pool
 from webgate.files.sftp_service import SFTPClient, validate_path
 from webgate.servers.models import Server
 from webgate.servers.service import get_server, get_server_credentials, resolve_jump_creds
+from webgate.webhooks.dispatcher import fire as fire_webhook
 
 router = APIRouter(prefix="/api/files", tags=["files"])
 
@@ -199,6 +200,10 @@ async def upload_files(
                 data = await f.read()
                 await client.upload(dest, data)
                 uploaded.append(dest)
+            await fire_webhook("sftp_upload", {
+                "user": current_user.username, "server_id": server_id,
+                "paths": uploaded, "count": len(uploaded),
+            })
             return {"uploaded": uploaded, "count": len(uploaded)}
         except ValueError as e:
             raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(e)) from e
@@ -256,6 +261,9 @@ async def delete_item(
             check_read_only(read_only)
             check_path_allowed(path, allowed_paths)
             await client.delete(path)
+            await fire_webhook("sftp_delete", {
+                "user": current_user.username, "server_id": server_id, "path": path,
+            })
             return {"path": validate_path(path), "status": "deleted"}
         except ValueError as e:
             raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(e)) from e

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/servers/routes.py

@@ -7,6 +7,7 @@ from webgate.auth.models import UserOut
 from webgate.auth.routes import get_current_user
 from webgate.db.engine import get_session
 from webgate.servers.models import ServerCreate, ServerImport, ServerOut, ServerUpdate
+from webgate.webhooks.dispatcher import fire as fire_webhook
 from webgate.servers.service import (
     create_server,
     delete_server,
@@ -57,6 +58,10 @@ async def create(
 ) -> ServerOut:
     _require_admin(current_user)
     server = await create_server(session, body, current_user.id)
+    await fire_webhook("server_added", {
+        "id": server.id, "name": server.name, "hostname": server.hostname,
+        "by": current_user.username,
+    })
     return server_to_out(server)
 
 
@@ -144,7 +149,9 @@ async def delete(
     server = await get_server(session, server_id, current_user.id, is_admin=True)
     if not server:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Server not found")
+    server_info = {"id": server.id, "name": server.name, "hostname": server.hostname}
     await delete_server(session, server)
+    await fire_webhook("server_deleted", {**server_info, "by": current_user.username})
 
 
 @router.post("/{server_id}/test")

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/static/index.html

@@ -232,6 +232,7 @@ window._showToastImpl = function(message, type) {
             <button x-show="currentUser?.is_admin" @click="showServerModal=true;resetServerForm()" class="fz-btn" style="font-size:11px" title="New Server (Ctrl+N)">New Server</button>
             <button x-show="currentUser?.is_admin" @click="openUsersModal()" class="fz-btn" style="font-size:11px">Users</button>
             <button x-show="currentUser?.is_admin" @click="openAuditLog()" class="fz-btn" style="font-size:11px">Audit</button>
+            <button x-show="currentUser?.is_admin" @click="openWebhooksModal()" class="fz-btn" style="font-size:11px">Webhooks</button>
             <button @click="openApiKeysModal()" class="fz-btn" style="font-size:11px">Keys</button>
         </div>
         <div style="display:flex;align-items:center;gap:8px">
@@ -741,6 +742,59 @@ window._showToastImpl = function(message, type) {
     </div>
 </div>
 
+<!-- ======== WEBHOOKS MODAL ======== -->
+<div x-show="showWebhooksModal" class="fz-modal-bg" @click.self="showWebhooksModal=false">
+    <div class="fz-modal" style="width:720px" @click.stop>
+        <div class="fz-modal-title">Webhooks</div>
+        <div class="fz-modal-body" style="padding:0;max-height:50vh;overflow-y:auto">
+            <table style="width:100%;font-size:12px;border-collapse:collapse">
+                <thead style="position:sticky;top:0;background:var(--btn-bg)">
+                    <tr>
+                        <th style="padding:8px 12px;border-bottom:1px solid var(--border);color:var(--text-secondary);font-size:10px;text-transform:uppercase;text-align:left">Name</th>
+                        <th style="padding:8px 12px;border-bottom:1px solid var(--border);color:var(--text-secondary);font-size:10px;text-transform:uppercase;text-align:left">URL</th>
+                        <th style="padding:8px 12px;border-bottom:1px solid var(--border);color:var(--text-secondary);font-size:10px;text-transform:uppercase;text-align:left">Events</th>
+                        <th style="padding:8px 12px;border-bottom:1px solid var(--border);color:var(--text-secondary);font-size:10px;text-transform:uppercase;text-align:left">Last</th>
+                        <th style="padding:8px 12px;border-bottom:1px solid var(--border);color:var(--text-secondary);font-size:10px;text-transform:uppercase;width:120px"></th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <template x-for="w in webhooks" :key="w.id">
+                        <tr style="border-bottom:1px solid var(--btn-bg)">
+                            <td style="padding:6px 12px;color:var(--text-primary);font-weight:500" x-text="w.name"></td>
+                            <td style="padding:6px 12px;font-family:'JetBrains Mono',monospace;color:var(--text-secondary);font-size:11px;max-width:200px;overflow:hidden;text-overflow:ellipsis" :title="w.url" x-text="w.url"></td>
+                            <td style="padding:6px 12px;color:var(--text-secondary);font-size:11px" x-text="w.events.join(', ')"></td>
+                            <td style="padding:6px 12px;color:var(--text-secondary);font-size:11px">
+                                <span x-show="w.last_status" :style="(w.last_status >= 200 && w.last_status < 300) ? 'color:var(--success)' : 'color:var(--danger)'" x-text="w.last_status + ' · ' + (w.last_fired_at ? new Date(w.last_fired_at).toLocaleString() : '')"></span>
+                                <span x-show="!w.last_status" style="color:var(--text-muted)">never fired</span>
+                            </td>
+                            <td style="padding:6px 12px;display:flex;gap:4px">
+                                <button @click="testWebhook(w)" class="fz-btn" style="font-size:10px;padding:1px 6px">Test</button>
+                                <button @click="confirmDeleteWebhook(w)" class="fz-btn fz-btn-danger" style="font-size:10px;padding:1px 6px">Del</button>
+                            </td>
+                        </tr>
+                    </template>
+                    <template x-if="webhooks.length === 0">
+                        <tr><td colspan="5" style="padding:16px;text-align:center;color:var(--text-muted);font-size:12px">No webhooks. Add one below.</td></tr>
+                    </template>
+                </tbody>
+            </table>
+        </div>
+        <div style="border-top:1px solid var(--border);padding:12px 16px;background:var(--bg-tertiary)">
+            <div style="font-size:12px;font-weight:600;margin-bottom:8px;color:var(--text-primary)">Add Webhook</div>
+            <form @submit.prevent="createWebhook()" style="display:grid;grid-template-columns:1fr 2fr 1fr;gap:6px;align-items:end">
+                <div><label style="font-size:10px;color:var(--text-secondary);font-weight:500">Name</label><input type="text" x-model="newWebhook.name" required placeholder="Slack" style="width:100%;font-size:12px;padding:5px 8px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)"></div>
+                <div><label style="font-size:10px;color:var(--text-secondary);font-weight:500">URL</label><input type="url" x-model="newWebhook.url" required placeholder="https://hooks.slack.com/..." style="width:100%;font-size:12px;padding:5px 8px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)"></div>
+                <div><label style="font-size:10px;color:var(--text-secondary);font-weight:500">Events</label><input type="text" x-model="newWebhook.events" placeholder="* (or ssh_connect,user_login)" style="width:100%;font-size:12px;padding:5px 8px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)"></div>
+                <div style="grid-column:span 2"><label style="font-size:10px;color:var(--text-secondary);font-weight:500">Secret (optional, for HMAC signing)</label><input type="text" x-model="newWebhook.secret" placeholder="leave empty to skip" style="width:100%;font-size:12px;padding:5px 8px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)"></div>
+                <button type="submit" class="fz-btn fz-btn-primary" style="font-size:12px">Add</button>
+            </form>
+        </div>
+        <div class="fz-modal-footer">
+            <button @click="showWebhooksModal=false" class="fz-btn">Close</button>
+        </div>
+    </div>
+</div>
+
 <!-- ======== EDIT GROUPS MODAL ======== -->
 <div x-show="showGroupsModal" class="fz-modal-bg" @click.self="showGroupsModal=false">
     <div class="fz-modal" style="width:400px" @click.stop>
@@ -846,6 +900,7 @@ function app() {
         editingUserObj: null, editingGroupsStr: '',
         showAuditModal: false, auditEntries: [],
         showApiKeysModal: false, apiKeys: [], newApiKeyName: '', createdApiKey: null,
+        showWebhooksModal: false, webhooks: [], newWebhook: { name: '', url: '', events: '*', secret: '' },
         view: 'dashboard',
         ssh: { host: '', port: 22, username: '', password: '' },
         servers: [], groups: [], selectedGroup: '', searchQuery: '',
@@ -1429,6 +1484,29 @@ function app() {
             if (!confirm(`Revoke API key "${k.name}"?`)) return;
             try { await this.apiCall(`/api/auth/api-keys/${k.id}`, { method: 'DELETE' }); this.showToast('API key revoked'); this.apiKeys = await this.apiCall('/api/auth/api-keys'); } catch (e) { this.showToast(e.message, 'error'); }
         },
+
+        // Webhooks
+        async openWebhooksModal() {
+            try { this.webhooks = await this.apiCall('/api/webhooks'); } catch (e) { this.showToast(e.message, 'error'); return; }
+            this.showWebhooksModal = true;
+        },
+        async createWebhook() {
+            const events = (this.newWebhook.events || '*').split(',').map(e => e.trim()).filter(Boolean);
+            const body = { name: this.newWebhook.name.trim(), url: this.newWebhook.url.trim(), events, secret: this.newWebhook.secret || '' };
+            try {
+                await this.apiCall('/api/webhooks', { method: 'POST', body: JSON.stringify(body) });
+                this.newWebhook = { name: '', url: '', events: '*', secret: '' };
+                this.webhooks = await this.apiCall('/api/webhooks');
+                this.showToast('Webhook added');
+            } catch (e) { this.showToast(e.message, 'error'); }
+        },
+        async confirmDeleteWebhook(w) {
+            if (!confirm(`Delete webhook "${w.name}"?`)) return;
+            try { await this.apiCall(`/api/webhooks/${w.id}`, { method: 'DELETE' }); this.webhooks = await this.apiCall('/api/webhooks'); this.showToast('Webhook deleted'); } catch (e) { this.showToast(e.message, 'error'); }
+        },
+        async testWebhook(w) {
+            try { await this.apiCall(`/api/webhooks/${w.id}/test`, { method: 'POST' }); this.showToast(`Test queued for "${w.name}"`); setTimeout(async () => { this.webhooks = await this.apiCall('/api/webhooks'); }, 1500); } catch (e) { this.showToast(e.message, 'error'); }
+        },
     };
 }
 </script>

{webgate-0.3.0 → webgate-0.3.2}/src/webgate/terminal/routes.py

@@ -13,6 +13,7 @@ from webgate.servers.service import (
     update_last_connected,
 )
 from webgate.terminal.ws_handler import authenticate_websocket, handle_terminal_ws
+from webgate.webhooks.dispatcher import fire as fire_webhook
 
 router = APIRouter(tags=["terminal"])
 
@@ -107,6 +108,10 @@ async def ws_terminal_server(ws: WebSocket, server_id: int) -> None:
 
         await update_last_connected(session, server)
         await log_action(user_out.id, user_out.username, "ssh_connect", f"{server.hostname}:{server.port}")
+        await fire_webhook("ssh_connect", {
+            "user": user_out.username, "server_id": server.id, "server": server.name,
+            "host": f"{server.hostname}:{server.port}", "via_jump": server.jump_via_id is not None,
+        })
 
     await handle_terminal_ws(
         ws,

webgate-0.3.2/src/webgate/webhooks/dispatcher.py

@@ -0,0 +1,74 @@
+"""Fire-and-forget webhook dispatcher.
+
+Webhooks are sent asynchronously without blocking the request that triggered
+them. Failures are logged and stored on the webhook row (last_status) but
+never propagate back to the caller.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import hashlib
+import hmac
+import json
+import logging
+from datetime import UTC, datetime
+from typing import Any
+
+import httpx
+from sqlalchemy import select
+
+from webgate.db.engine import async_session_factory
+from webgate.webhooks.models import Webhook
+
+logger = logging.getLogger(__name__)
+
+_TIMEOUT = 5.0  # seconds
+
+
+def _sign(secret: str, body: bytes) -> str:
+    return hmac.new(secret.encode(), body, hashlib.sha256).hexdigest()
+
+
+async def _deliver(webhook_id: int, url: str, secret: str, payload: dict[str, Any]) -> None:
+    body = json.dumps(payload).encode()
+    headers = {"Content-Type": "application/json", "User-Agent": "webgate-webhook/1.0"}
+    if secret:
+        headers["X-Webgate-Signature"] = "sha256=" + _sign(secret, body)
+    status: int | None = None
+    try:
+        async with httpx.AsyncClient(timeout=_TIMEOUT) as client:
+            resp = await client.post(url, content=body, headers=headers)
+            status = resp.status_code
+    except Exception as e:
+        logger.warning("Webhook %s -> %s failed: %s", webhook_id, url, e)
+    finally:
+        async with async_session_factory() as session:
+            wh = (
+                await session.execute(select(Webhook).where(Webhook.id == webhook_id))
+            ).scalar_one_or_none()
+            if wh is not None:
+                wh.last_fired_at = datetime.now(UTC)
+                wh.last_status = status
+                await session.commit()
+
+
+async def fire(event: str, data: dict[str, Any]) -> None:
+    """Fire-and-forget: schedule webhook deliveries for this event."""
+    payload = {
+        "event": event,
+        "timestamp": datetime.now(UTC).isoformat(),
+        "data": data,
+    }
+    async with async_session_factory() as session:
+        result = await session.execute(select(Webhook).where(Webhook.enabled.is_(True)))
+        hooks = list(result.scalars().all())
+    for wh in hooks:
+        try:
+            events = json.loads(wh.events)
+        except json.JSONDecodeError:
+            events = ["*"]
+        if "*" not in events and event not in events:
+            continue
+        # Detached background task; never block caller.
+        asyncio.create_task(_deliver(wh.id, wh.url, wh.secret, payload))

webgate-0.3.2/src/webgate/webhooks/models.py

@@ -0,0 +1,61 @@
+from datetime import datetime
+
+from pydantic import BaseModel, Field
+from sqlalchemy import Boolean, DateTime, ForeignKey, Integer, String, Text, func
+from sqlalchemy.orm import Mapped, mapped_column
+
+from webgate.db.engine import Base
+
+# Known event names. Stored in `events` as a JSON array of strings; "*" means all.
+EVENT_NAMES = [
+    "user_login",
+    "user_login_failed",
+    "ssh_connect",
+    "sftp_upload",
+    "sftp_delete",
+    "server_added",
+    "server_deleted",
+]
+
+
+class Webhook(Base):
+    __tablename__ = "webhooks"
+
+    id: Mapped[int] = mapped_column(primary_key=True, autoincrement=True)
+    name: Mapped[str] = mapped_column(String(255))
+    url: Mapped[str] = mapped_column(Text)
+    events: Mapped[str] = mapped_column(Text, default='["*"]')  # JSON array
+    enabled: Mapped[bool] = mapped_column(Boolean, default=True)
+    secret: Mapped[str] = mapped_column(String(255), default="")  # HMAC signing key
+    last_fired_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
+    last_status: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    user_id: Mapped[int] = mapped_column(Integer, ForeignKey("users.id"))
+    created_at: Mapped[datetime] = mapped_column(DateTime, server_default=func.now())
+
+
+class WebhookCreate(BaseModel):
+    name: str
+    url: str
+    events: list[str] = Field(default_factory=lambda: ["*"])
+    enabled: bool = True
+    secret: str = ""
+
+
+class WebhookUpdate(BaseModel):
+    name: str | None = None
+    url: str | None = None
+    events: list[str] | None = None
+    enabled: bool | None = None
+    secret: str | None = None
+
+
+class WebhookOut(BaseModel):
+    id: int
+    name: str
+    url: str
+    events: list[str]
+    enabled: bool
+    has_secret: bool
+    last_fired_at: datetime | None
+    last_status: int | None
+    created_at: datetime

webgate-0.3.2/src/webgate/webhooks/routes.py

@@ -0,0 +1,129 @@
+import json
+from typing import Annotated
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from webgate.auth.models import UserOut
+from webgate.auth.routes import get_current_user
+from webgate.db.engine import get_session
+from webgate.webhooks.dispatcher import fire
+from webgate.webhooks.models import (
+    EVENT_NAMES,
+    Webhook,
+    WebhookCreate,
+    WebhookOut,
+    WebhookUpdate,
+)
+
+router = APIRouter(prefix="/api/webhooks", tags=["webhooks"])
+
+SessionDep = Annotated[AsyncSession, Depends(get_session)]
+CurrentUserDep = Annotated[UserOut, Depends(get_current_user)]
+
+
+def _to_out(wh: Webhook) -> WebhookOut:
+    try:
+        events = json.loads(wh.events)
+    except json.JSONDecodeError:
+        events = ["*"]
+    return WebhookOut(
+        id=wh.id,
+        name=wh.name,
+        url=wh.url,
+        events=events,
+        enabled=wh.enabled,
+        has_secret=bool(wh.secret),
+        last_fired_at=wh.last_fired_at,
+        last_status=wh.last_status,
+        created_at=wh.created_at,
+    )
+
+
+def _require_admin(user: UserOut) -> None:
+    if not user.is_admin:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Admin only")
+
+
+@router.get("", response_model=list[WebhookOut])
+async def list_webhooks(session: SessionDep, user: CurrentUserDep) -> list[WebhookOut]:
+    _require_admin(user)
+    result = await session.execute(select(Webhook).order_by(Webhook.name))
+    return [_to_out(w) for w in result.scalars().all()]
+
+
+@router.get("/events", response_model=list[str])
+async def list_events(user: CurrentUserDep) -> list[str]:
+    _require_admin(user)
+    return EVENT_NAMES
+
+
+@router.post("", response_model=WebhookOut, status_code=status.HTTP_201_CREATED)
+async def create_webhook(
+    body: WebhookCreate, session: SessionDep, user: CurrentUserDep
+) -> WebhookOut:
+    _require_admin(user)
+    wh = Webhook(
+        name=body.name,
+        url=body.url,
+        events=json.dumps(body.events or ["*"]),
+        enabled=body.enabled,
+        secret=body.secret,
+        user_id=user.id,
+    )
+    session.add(wh)
+    await session.commit()
+    await session.refresh(wh)
+    return _to_out(wh)
+
+
+@router.put("/{webhook_id}", response_model=WebhookOut)
+async def update_webhook(
+    webhook_id: int, body: WebhookUpdate, session: SessionDep, user: CurrentUserDep
+) -> WebhookOut:
+    _require_admin(user)
+    wh = (
+        await session.execute(select(Webhook).where(Webhook.id == webhook_id))
+    ).scalar_one_or_none()
+    if wh is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Webhook not found")
+    if body.name is not None:
+        wh.name = body.name
+    if body.url is not None:
+        wh.url = body.url
+    if body.events is not None:
+        wh.events = json.dumps(body.events)
+    if body.enabled is not None:
+        wh.enabled = body.enabled
+    if body.secret is not None:
+        wh.secret = body.secret
+    await session.commit()
+    await session.refresh(wh)
+    return _to_out(wh)
+
+
+@router.delete("/{webhook_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def delete_webhook(webhook_id: int, session: SessionDep, user: CurrentUserDep) -> None:
+    _require_admin(user)
+    wh = (
+        await session.execute(select(Webhook).where(Webhook.id == webhook_id))
+    ).scalar_one_or_none()
+    if wh is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Webhook not found")
+    await session.delete(wh)
+    await session.commit()
+
+
+@router.post("/{webhook_id}/test")
+async def test_webhook(
+    webhook_id: int, session: SessionDep, user: CurrentUserDep
+) -> dict[str, object]:
+    _require_admin(user)
+    wh = (
+        await session.execute(select(Webhook).where(Webhook.id == webhook_id))
+    ).scalar_one_or_none()
+    if wh is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Webhook not found")
+    await fire("test", {"webhook_id": wh.id, "name": wh.name, "triggered_by": user.username})
+    return {"queued": True}

{webgate-0.3.0 → webgate-0.3.2}/uv.lock

@@ -51,6 +51,54 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/da/42/e921fccf5015463e32a3cf6ee7f980a6ed0f395ceeaa45060b61d86486c2/anyio-4.13.0-py3-none-any.whl", hash = "sha256:08b310f9e24a9594186fd75b4f73f4a4152069e3853f1ed8bfbf58369f4ad708", size = 114353, upload-time = "2026-03-24T12:59:08.246Z" },
 ]
 
+[[package]]
+name = "asyncpg"
+version = "0.31.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/fe/cc/d18065ce2380d80b1bcce927c24a2642efd38918e33fd724bc4bca904877/asyncpg-0.31.0.tar.gz", hash = "sha256:c989386c83940bfbd787180f2b1519415e2d3d6277a70d9d0f0145ac73500735", size = 993667, upload-time = "2025-11-24T23:27:00.812Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/08/17/cc02bc49bc350623d050fa139e34ea512cd6e020562f2a7312a7bcae4bc9/asyncpg-0.31.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:eee690960e8ab85063ba93af2ce128c0f52fd655fdff9fdb1a28df01329f031d", size = 643159, upload-time = "2025-11-24T23:25:36.443Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/62/4ded7d400a7b651adf06f49ea8f73100cca07c6df012119594d1e3447aa6/asyncpg-0.31.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:2657204552b75f8288de08ca60faf4a99a65deef3a71d1467454123205a88fab", size = 638157, upload-time = "2025-11-24T23:25:37.89Z" },
+    { url = "https://files.pythonhosted.org/packages/d6/5b/4179538a9a72166a0bf60ad783b1ef16efb7960e4d7b9afe9f77a5551680/asyncpg-0.31.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a429e842a3a4b4ea240ea52d7fe3f82d5149853249306f7ff166cb9948faa46c", size = 2918051, upload-time = "2025-11-24T23:25:39.461Z" },
+    { url = "https://files.pythonhosted.org/packages/e6/35/c27719ae0536c5b6e61e4701391ffe435ef59539e9360959240d6e47c8c8/asyncpg-0.31.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:c0807be46c32c963ae40d329b3a686356e417f674c976c07fa49f1b30303f109", size = 2972640, upload-time = "2025-11-24T23:25:41.512Z" },
+    { url = "https://files.pythonhosted.org/packages/43/f4/01ebb9207f29e645a64699b9ce0eefeff8e7a33494e1d29bb53736f7766b/asyncpg-0.31.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:e5d5098f63beeae93512ee513d4c0c53dc12e9aa2b7a1af5a81cddf93fe4e4da", size = 2851050, upload-time = "2025-11-24T23:25:43.153Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/f4/03ff1426acc87be0f4e8d40fa2bff5c3952bef0080062af9efc2212e3be8/asyncpg-0.31.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:37fc6c00a814e18eef51833545d1891cac9aa69140598bb076b4cd29b3e010b9", size = 2962574, upload-time = "2025-11-24T23:25:44.942Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/39/cc788dfca3d4060f9d93e67be396ceec458dfc429e26139059e58c2c244d/asyncpg-0.31.0-cp311-cp311-win32.whl", hash = "sha256:5a4af56edf82a701aece93190cc4e094d2df7d33f6e915c222fb09efbb5afc24", size = 521076, upload-time = "2025-11-24T23:25:46.486Z" },
+    { url = "https://files.pythonhosted.org/packages/28/fc/735af5384c029eb7f1ca60ccb8fa95521dbdaeef788edf4cecfc604c3cab/asyncpg-0.31.0-cp311-cp311-win_amd64.whl", hash = "sha256:480c4befbdf079c14c9ca43c8c5e1fe8b6296c96f1f927158d4f1e750aacc047", size = 584980, upload-time = "2025-11-24T23:25:47.938Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/a6/59d0a146e61d20e18db7396583242e32e0f120693b67a8de43f1557033e2/asyncpg-0.31.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:b44c31e1efc1c15188ef183f287c728e2046abb1d26af4d20858215d50d91fad", size = 662042, upload-time = "2025-11-24T23:25:49.578Z" },
+    { url = "https://files.pythonhosted.org/packages/36/01/ffaa189dcb63a2471720615e60185c3f6327716fdc0fc04334436fbb7c65/asyncpg-0.31.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:0c89ccf741c067614c9b5fc7f1fc6f3b61ab05ae4aaa966e6fd6b93097c7d20d", size = 638504, upload-time = "2025-11-24T23:25:51.501Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/62/3f699ba45d8bd24c5d65392190d19656d74ff0185f42e19d0bbd973bb371/asyncpg-0.31.0-cp312-cp312-manylinux_2_28_aarch64.whl", hash = "sha256:12b3b2e39dc5470abd5e98c8d3373e4b1d1234d9fbdedf538798b2c13c64460a", size = 3426241, upload-time = "2025-11-24T23:25:53.278Z" },
+    { url = "https://files.pythonhosted.org/packages/8c/d1/a867c2150f9c6e7af6462637f613ba67f78a314b00db220cd26ff559d532/asyncpg-0.31.0-cp312-cp312-manylinux_2_28_x86_64.whl", hash = "sha256:aad7a33913fb8bcb5454313377cc330fbb19a0cd5faa7272407d8a0c4257b671", size = 3520321, upload-time = "2025-11-24T23:25:54.982Z" },
+    { url = "https://files.pythonhosted.org/packages/7a/1a/cce4c3f246805ecd285a3591222a2611141f1669d002163abef999b60f98/asyncpg-0.31.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:3df118d94f46d85b2e434fd62c84cb66d5834d5a890725fe625f498e72e4d5ec", size = 3316685, upload-time = "2025-11-24T23:25:57.43Z" },
+    { url = "https://files.pythonhosted.org/packages/40/ae/0fc961179e78cc579e138fad6eb580448ecae64908f95b8cb8ee2f241f67/asyncpg-0.31.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:bd5b6efff3c17c3202d4b37189969acf8927438a238c6257f66be3c426beba20", size = 3471858, upload-time = "2025-11-24T23:25:59.636Z" },
+    { url = "https://files.pythonhosted.org/packages/52/b2/b20e09670be031afa4cbfabd645caece7f85ec62d69c312239de568e058e/asyncpg-0.31.0-cp312-cp312-win32.whl", hash = "sha256:027eaa61361ec735926566f995d959ade4796f6a49d3bde17e5134b9964f9ba8", size = 527852, upload-time = "2025-11-24T23:26:01.084Z" },
+    { url = "https://files.pythonhosted.org/packages/b5/f0/f2ed1de154e15b107dc692262395b3c17fc34eafe2a78fc2115931561730/asyncpg-0.31.0-cp312-cp312-win_amd64.whl", hash = "sha256:72d6bdcbc93d608a1158f17932de2321f68b1a967a13e014998db87a72ed3186", size = 597175, upload-time = "2025-11-24T23:26:02.564Z" },
+    { url = "https://files.pythonhosted.org/packages/95/11/97b5c2af72a5d0b9bc3fa30cd4b9ce22284a9a943a150fdc768763caf035/asyncpg-0.31.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:c204fab1b91e08b0f47e90a75d1b3c62174dab21f670ad6c5d0f243a228f015b", size = 661111, upload-time = "2025-11-24T23:26:04.467Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/71/157d611c791a5e2d0423f09f027bd499935f0906e0c2a416ce712ba51ef3/asyncpg-0.31.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:54a64f91839ba59008eccf7aad2e93d6e3de688d796f35803235ea1c4898ae1e", size = 636928, upload-time = "2025-11-24T23:26:05.944Z" },
+    { url = "https://files.pythonhosted.org/packages/2e/fc/9e3486fb2bbe69d4a867c0b76d68542650a7ff1574ca40e84c3111bb0c6e/asyncpg-0.31.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:c0e0822b1038dc7253b337b0f3f676cadc4ac31b126c5d42691c39691962e403", size = 3424067, upload-time = "2025-11-24T23:26:07.957Z" },
+    { url = "https://files.pythonhosted.org/packages/12/c6/8c9d076f73f07f995013c791e018a1cd5f31823c2a3187fc8581706aa00f/asyncpg-0.31.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:bef056aa502ee34204c161c72ca1f3c274917596877f825968368b2c33f585f4", size = 3518156, upload-time = "2025-11-24T23:26:09.591Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/3b/60683a0baf50fbc546499cfb53132cb6835b92b529a05f6a81471ab60d0c/asyncpg-0.31.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:0bfbcc5b7ffcd9b75ab1558f00db2ae07db9c80637ad1b2469c43df79d7a5ae2", size = 3319636, upload-time = "2025-11-24T23:26:11.168Z" },
+    { url = "https://files.pythonhosted.org/packages/50/dc/8487df0f69bd398a61e1792b3cba0e47477f214eff085ba0efa7eac9ce87/asyncpg-0.31.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:22bc525ebbdc24d1261ecbf6f504998244d4e3be1721784b5f64664d61fbe602", size = 3472079, upload-time = "2025-11-24T23:26:13.164Z" },
+    { url = "https://files.pythonhosted.org/packages/13/a1/c5bbeeb8531c05c89135cb8b28575ac2fac618bcb60119ee9696c3faf71c/asyncpg-0.31.0-cp313-cp313-win32.whl", hash = "sha256:f890de5e1e4f7e14023619399a471ce4b71f5418cd67a51853b9910fdfa73696", size = 527606, upload-time = "2025-11-24T23:26:14.78Z" },
+    { url = "https://files.pythonhosted.org/packages/91/66/b25ccb84a246b470eb943b0107c07edcae51804912b824054b3413995a10/asyncpg-0.31.0-cp313-cp313-win_amd64.whl", hash = "sha256:dc5f2fa9916f292e5c5c8b2ac2813763bcd7f58e130055b4ad8a0531314201ab", size = 596569, upload-time = "2025-11-24T23:26:16.189Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/36/e9450d62e84a13aea6580c83a47a437f26c7ca6fa0f0fd40b6670793ea30/asyncpg-0.31.0-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:f6b56b91bb0ffc328c4e3ed113136cddd9deefdf5f79ab448598b9772831df44", size = 660867, upload-time = "2025-11-24T23:26:17.631Z" },
+    { url = "https://files.pythonhosted.org/packages/82/4b/1d0a2b33b3102d210439338e1beea616a6122267c0df459ff0265cd5807a/asyncpg-0.31.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:334dec28cf20d7f5bb9e45b39546ddf247f8042a690bff9b9573d00086e69cb5", size = 638349, upload-time = "2025-11-24T23:26:19.689Z" },
+    { url = "https://files.pythonhosted.org/packages/41/aa/e7f7ac9a7974f08eff9183e392b2d62516f90412686532d27e196c0f0eeb/asyncpg-0.31.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:98cc158c53f46de7bb677fd20c417e264fc02b36d901cc2a43bd6cb0dc6dbfd2", size = 3410428, upload-time = "2025-11-24T23:26:21.275Z" },
+    { url = "https://files.pythonhosted.org/packages/6f/de/bf1b60de3dede5c2731e6788617a512bc0ebd9693eac297ee74086f101d7/asyncpg-0.31.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:9322b563e2661a52e3cdbc93eed3be7748b289f792e0011cb2720d278b366ce2", size = 3471678, upload-time = "2025-11-24T23:26:23.627Z" },
+    { url = "https://files.pythonhosted.org/packages/46/78/fc3ade003e22d8bd53aaf8f75f4be48f0b460fa73738f0391b9c856a9147/asyncpg-0.31.0-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:19857a358fc811d82227449b7ca40afb46e75b33eb8897240c3839dd8b744218", size = 3313505, upload-time = "2025-11-24T23:26:25.235Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/e9/73eb8a6789e927816f4705291be21f2225687bfa97321e40cd23055e903a/asyncpg-0.31.0-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:ba5f8886e850882ff2c2ace5732300e99193823e8107e2c53ef01c1ebfa1e85d", size = 3434744, upload-time = "2025-11-24T23:26:26.944Z" },
+    { url = "https://files.pythonhosted.org/packages/08/4b/f10b880534413c65c5b5862f79b8e81553a8f364e5238832ad4c0af71b7f/asyncpg-0.31.0-cp314-cp314-win32.whl", hash = "sha256:cea3a0b2a14f95834cee29432e4ddc399b95700eb1d51bbc5bfee8f31fa07b2b", size = 532251, upload-time = "2025-11-24T23:26:28.404Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/2d/7aa40750b7a19efa5d66e67fc06008ca0f27ba1bd082e457ad82f59aba49/asyncpg-0.31.0-cp314-cp314-win_amd64.whl", hash = "sha256:04d19392716af6b029411a0264d92093b6e5e8285ae97a39957b9a9c14ea72be", size = 604901, upload-time = "2025-11-24T23:26:30.34Z" },
+    { url = "https://files.pythonhosted.org/packages/ce/fe/b9dfe349b83b9dee28cc42360d2c86b2cdce4cb551a2c2d27e156bcac84d/asyncpg-0.31.0-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:bdb957706da132e982cc6856bb2f7b740603472b54c3ebc77fe60ea3e57e1bd2", size = 702280, upload-time = "2025-11-24T23:26:32Z" },
+    { url = "https://files.pythonhosted.org/packages/6a/81/e6be6e37e560bd91e6c23ea8a6138a04fd057b08cf63d3c5055c98e81c1d/asyncpg-0.31.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:6d11b198111a72f47154fa03b85799f9be63701e068b43f84ac25da0bda9cb31", size = 682931, upload-time = "2025-11-24T23:26:33.572Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/45/6009040da85a1648dd5bc75b3b0a062081c483e75a1a29041ae63a0bf0dc/asyncpg-0.31.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:18c83b03bc0d1b23e6230f5bf8d4f217dc9bc08644ce0502a9d91dc9e634a9c7", size = 3581608, upload-time = "2025-11-24T23:26:35.638Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/06/2e3d4d7608b0b2b3adbee0d0bd6a2d29ca0fc4d8a78f8277df04e2d1fd7b/asyncpg-0.31.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:e009abc333464ff18b8f6fd146addffd9aaf63e79aa3bb40ab7a4c332d0c5e9e", size = 3498738, upload-time = "2025-11-24T23:26:37.275Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/aa/7d75ede780033141c51d83577ea23236ba7d3a23593929b32b49db8ed36e/asyncpg-0.31.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:3b1fbcb0e396a5ca435a8826a87e5c2c2cc0c8c68eb6fadf82168056b0e53a8c", size = 3401026, upload-time = "2025-11-24T23:26:39.423Z" },
+    { url = "https://files.pythonhosted.org/packages/ba/7a/15e37d45e7f7c94facc1e9148c0e455e8f33c08f0b8a0b1deb2c5171771b/asyncpg-0.31.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:8df714dba348efcc162d2adf02d213e5fab1bd9f557e1305633e851a61814a7a", size = 3429426, upload-time = "2025-11-24T23:26:41.032Z" },
+    { url = "https://files.pythonhosted.org/packages/13/d5/71437c5f6ae5f307828710efbe62163974e71237d5d46ebd2869ea052d10/asyncpg-0.31.0-cp314-cp314t-win32.whl", hash = "sha256:1b41f1afb1033f2b44f3234993b15096ddc9cd71b21a42dbd87fc6a57b43d65d", size = 614495, upload-time = "2025-11-24T23:26:42.659Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/d7/8fb3044eaef08a310acfe23dae9a8e2e07d305edc29a53497e52bc76eca7/asyncpg-0.31.0-cp314-cp314t-win_amd64.whl", hash = "sha256:bd4107bb7cdd0e9e65fae66a62afd3a249663b844fa34d479f6d5b3bef9c04c3", size = 706062, upload-time = "2025-11-24T23:26:44.086Z" },
+]
+
 [[package]]
 name = "asyncssh"
 version = "2.22.0"
@@ -1787,15 +1835,17 @@ wheels = [
 
 [[package]]
 name = "webgate"
-version = "0.2.0"
+version = "0.3.1"
 source = { editable = "." }
 dependencies = [
     { name = "aiofiles" },
     { name = "aiosqlite" },
+    { name = "asyncpg" },
     { name = "asyncssh" },
     { name = "bcrypt" },
     { name = "cryptography" },
     { name = "fastapi" },
+    { name = "httpx" },
     { name = "passlib", extra = ["bcrypt"] },
     { name = "pydantic" },
     { name = "pydantic-settings" },
@@ -1826,10 +1876,12 @@ dev = [
 requires-dist = [
     { name = "aiofiles", specifier = ">=24.1.0" },
     { name = "aiosqlite", specifier = ">=0.21.0" },
+    { name = "asyncpg", specifier = ">=0.30.0" },
     { name = "asyncssh", specifier = ">=2.18.0" },
     { name = "bcrypt", specifier = ">=4.2.0" },
     { name = "cryptography", specifier = ">=44.0.0" },
     { name = "fastapi", specifier = ">=0.115.0" },
+    { name = "httpx", specifier = ">=0.28.0" },
     { name = "passlib", extras = ["bcrypt"], specifier = ">=1.7.4" },
     { name = "pydantic", specifier = ">=2.10.0" },
     { name = "pydantic-settings", specifier = ">=2.7.0" },