From 3459aa0ad8c0652f1306d6e2a8e9ccb8530c158b Mon Sep 17 00:00:00 2001
From: Lee Evans <lee@optimacloud.pro>
Date: Sun, 23 Aug 2026 02:50:58 +0100
Subject: [PATCH] Fix webhook signing secret never being revealed after
 creation

storeWebhookEndpoint flashes newWebhookEndpoint (including the one-time
plain-text signing secret) back to the Activity page, but the page only
captured the prop into revealedWebhookEndpoint at setup time. Inertia
updates props in place after the redirect without remounting, so the ref
stayed null and the reveal dialog never opened - the secret was
unrecoverable the moment it was created (webhook endpoints have no
rotate action to fall back on, unlike API keys).

Mirror the existing newApiKey watch so the flashed endpoint opens the
reveal dialog, matching the 'Copy the signing secret now' toast.
---
 resources/js/pages/Activity.vue | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/resources/js/pages/Activity.vue b/resources/js/pages/Activity.vue
index 243c72b..9696829 100644
--- a/resources/js/pages/Activity.vue
+++ b/resources/js/pages/Activity.vue
@@ -525,6 +525,15 @@ watch(
         }
     },
 );
+watch(
+    () => props.newWebhookEndpoint,
+    (newWebhookEndpoint) => {
+        if (newWebhookEndpoint) {
+            revealedWebhookEndpoint.value = newWebhookEndpoint;
+            webhookSecretCopied.value = false;
+        }
+    },
+);
 const projectForm = reactive({
     name: '',
     slug: '',