kjjfgdsf

sfdsfsdf

server/config/index.mjs

@@ -85,11 +85,15 @@ export const config = {
     .map((e) => e.trim().toLowerCase())
     .filter(Boolean),
 
-  // Gitea Webhook (Deployment)
-  gitea: {
-    webhookSecret: process.env.GITEA_WEBHOOK_SECRET || '',
-    webhookAuthToken: process.env.GITEA_WEBHOOK_AUTH_TOKEN || process.env.GITEA_WEBHOOK_SECRET || '',
-  },
+  // Gitea Webhook (Deployment) — trim: trailing newlines in .env break HMAC/Bearer match
+  gitea: (() => {
+    const secret = (process.env.GITEA_WEBHOOK_SECRET || '').trim()
+    const auth = (process.env.GITEA_WEBHOOK_AUTH_TOKEN || '').trim()
+    return {
+      webhookSecret: secret,
+      webhookAuthToken: auth || secret,
+    }
+  })(),
 
   /** HMAC secret for Gmail/Outlook OAuth state (recommended in production) */
   oauthStateSecret: process.env.OAUTH_STATE_SECRET || '',