Security

In order to be validated by discord, the implemented interactions endpoint must validate that the invocation is coming from discord.

The full details about how discord send messages and how to validate them can be found in their official documentation

To implement this, a caddy service is set up using the CarsonHoffman mod for caddy.

The Caddy reverse proxy will check the calls to the interactions endpoint veryfing the headers to ensure the call is made from discord.

The modified caddy has been built and uploaded to the docker hub