Declarative dynamic webhooks #2
Description
Putting webhooks in an add-on capabilities descriptor suffers from some deficiencies:
- No authentication of requests, so it isn't possible to tell if a request really came from a registered HipChat
- It is recommended to use a shared secret.
- Once an add-on is installed into a room and the webhooks are setup, if new webhooks are added, HipChat will not rescan the descriptor and add the new webhooks
If we provide a way for users to declare webhooks, then on start up we can take care of checking that all the webhooks are installed for each room registered. If we find one that is not, we install it with a shared secret.