No auth — auth/no_auth

# examples/auth/no_auth.yaml
#
# Reference config demonstrating the no_auth node.
# no_auth disables signature verification entirely for a flow.
#
# Use this only for:
#   - Internal flows reachable only from trusted networks
#   - Development and testing environments
#   - Flows behind an external authentication layer (e.g. API gateway)
#
# Use `{id: auth, type: no_auth}` rather than type: auth with scheme: no_auth.
# no_auth nodes do not require secret or signature_header; Hookway logs a
# warning at startup for every no_auth node it builds.

server:
  addr: ":8080"
  max_body_bytes: 1048576

destinations:
  primary:
    type: "rabbitmq"
    rabbitmq:
      url: "${RABBITMQ_URL}"
      exchange: "hookway.webhooks"
      exchange_type: "direct"
      durable: true
      publish_timeout: "5s"
      declare_queues: true

flows:
  internal_events:
    nodes:
      - {id: in, type: http_trigger, path: /webhooks/internal, methods: [POST]}
      - {id: body, type: read_body, max_bytes: 1048576}
      - {id: auth, type: no_auth}
      - {id: env, type: envelope, body_format: json}
      - {id: out, type: publish, destination: primary, target: internal-events, create: true}
    edges: [in>body, body>auth, auth>env, env>out]