Add webhook support for Cloudflare platform

[Prateek32177]

We want to add webhook support for Cloudflare in tern. Cloudflare sends events for DNS, security, deployments, and more.

Tasks

• Webhook Handler:
  • Implement a handler in /src/platforms/cloudflare.ts.
  • Normalize payloads into tern’s event structure (id, type, timestamp, payload).
• Platform Config:
  • Add platformConfigs.cloudflare with supported event types (e.g., dns.record.created, firewall.event, deployment.finished).
• Test Cases:
  • Add fixtures for at least 3 event types (DNS record created, firewall event, deployment finished).
  • Write Jest tests in /tests/cloudflare.test.ts to validate parsing.
• Docs:
  • Add setup instructions in /docs/platforms.md.
  • Example: how to configure a webhook in Cloudflare dashboard.
• Acceptance Criteria:
  • Cloudflare handler implemented
  • Tests cover 3+ event types
  • Docs updated
• Final Integration Testing:
  • Trigger a webhook event from the Cloudflare dashboard (use the “Send Test Event” option if available).
  • Verify the signature using the platform’s signing secret/HMAC.
  • The event should pass verification if the signature is correct.
  • The event should fail verification if the signature is invalid.
  • Add a test case in Jest covering both valid and invalid signature scenarios.

Contributor directive:

• Mention this issue and its number in your PR to get it linked with the issue.

---

Helpful Links:
Cloudflare Docs 1
Cloudflare Docs 2

[kawpii]

I would like to take a look at this

[Prateek32177]

I would like to take a look at this

assigned to you
and take your time to analyze as we are expecting a solid webhook integration must be well tested.

[kawpii]

@Prateek32177 I came up with the following for algorithm by looking at the docs, I'm confused with customConfig property though. What is it? Do I need to add signatureFormat, payloadFormat properties to it? As I see there is no formatting in signature and payload is JSON according to linked docs.

cloudflare:{
    platform: 'cloudflare',
		signatureConfig: {
			algorithm: 'rsa-sha256',
			headerName: 'dyte-signature',
			headerFormat: 'raw',
			payloadFormat: 'custom',
			customConfig: {
				encoding: 'base64',
				idHeader: 'dyte-webhook-id',
			}
	},
	description: 'Cloudflare webhooks use RSA-SHA256 with dyte-signature header and base64 encoding',
},

[kawpii]

@Prateek32177

Write Jest tests in /tests/cloudflare.test.ts to validate parsing.

There is no test directory, just test.ts

Add setup instructions in /docs/platforms.md.

There is no docs directory either.

[kawpii]

After further reading, it seems like PlatformAlgorithmConfig for CF should be something like below and implement custom verifier inside src/verifiers/custom-algorithms.ts

cloudflare:{
    platform: 'cloudflare',
		signatureConfig: {
			algorithm: 'rsa-sha256',
			headerName: 'dyte-signature',
			headerFormat: 'raw',
			payloadFormat: 'custom',
			customConfig: {
                type: 'asymmetric',
				encoding: 'base64',
				idHeader: 'dyte-webhook-id',
			}
	},
	description: 'Cloudflare webhooks use RSA-SHA256 with dyte-signature header and base64 encoding',
},