test: add comprehensive unit tests for webhooks module (#1721)

[aarushlohit]

Summary

Added comprehensive unit tests for the webhooks module to verify webhook event validation, secret generation, payload signing, signature verification, and webhook dispatch behavior.

Closes #1721

---

Type of Change

• Tests
• Bug fix
• New feature
• Documentation update
• Refactor / code cleanup

---

Changes Made

• Added unit tests for src/lib/webhooks.ts
• Added coverage for webhook event validation logic
• Added tests for secret key generation
• Added tests for payload signing and signature verification
• Added tests for webhook dispatch functionality
• Added failure-path and error-handling test cases
• Mocked external dependencies and network requests
• Improved overall module test coverage

---

Test Coverage

Event Validation

• Valid webhook events
• Invalid event types
• Empty inputs
• Null/undefined handling

Secret Generation

• Secret creation
• Length validation
• Randomness checks
• Format verification

Payload Signing & Verification

• Signature generation
• Signature verification success
• Invalid signature handling
• Tampered payload detection
• Incorrect secret validation

Webhook Dispatch

• Successful webhook delivery
• Failed request handling
• Timeout/error scenarios
• Request payload validation
• Header/signature verification

Error Handling

• Invalid arguments
• Missing parameters
• Unexpected exceptions
• Safe failure behavior

---

How to Test

Run the test suite:

npm test

Or run only the webhook tests:

npm test -- webhooks

Verify all tests pass successfully.

---

Checklist

• Linked issue in summary
• Added/updated tests
• Existing tests continue to pass
• Self-reviewed changes
• No breaking changes introduced

---

Additional Notes

These tests improve confidence in the webhook infrastructure by validating security-sensitive functionality such as signing, verification, and dispatch logic while helping prevent regressions in future changes.

[vercel]

@aarushlohit is attempting to deploy a commit to the PRIYANSHU DOSHI's projects Team on Vercel.

A member of the Team first needs to authorize it.

[github-actions]

GSSoC Label Checklist 🏷️

@Priyanshu-byte-coder — please apply the appropriate labels before merging:

Difficulty (pick one):

• level:beginner — 20 pts
• level:intermediate — 35 pts
• level:advanced — 55 pts
• level:critical — 80 pts

Quality (optional):

• quality:clean — ×1.2 multiplier
• quality:exceptional — ×1.5 multiplier

Validation (required to score):

• gssoc:approved — counts for points
• gssoc:invalid / gssoc:spam / gssoc:ai-slop — does not score

Type labels (type:*) are auto-detected from files and title. Review and adjust if needed.
Points formula: (difficulty × quality_multiplier) + type_bonus