changedInput schema / properties / delivery / oneOf
Previous value: -[
- {
- "additionalProperties": false,
- "properties": {
- "mode": {
- "const": "inline",
- "default": "inline",
- "title": "Mode",
- "type": "string"
- }
- },
- "title": "InlineDelivery",
- "type": "object"
- },
- {
- "additionalProperties": false,
- "properties": {
- "headers": {
- "anyOf": [
- {
- "additionalProperties": {
- "type": "string"
- },
- "type": "object"
- },
- {
- "type": "null"
- }
- ],
- "description": "Optional storage headers to include on the PUT call (Content-Type, Cache-Control, x-amz-acl, etc.). Whitelisted at SSRF layer.",
- "title": "Headers"
- },
- "mode": {
- "const": "put_url",
- "title": "Mode",
- "type": "string"
- },
- "put_url": {
- "description": "Customer-signed presigned PUT URL where the optimized bytes will be written. Must be https://. Cloud credentials never reach our infrastructure; only the URL itself is used and discarded after the request.",
- "format": "uri",
- "maxLength": 2083,
- "minLength": 1,
- "title": "Put Url",
- "type": "string"
- }
- },
- "required": [
- "mode",
- "put_url"
- ],
- "title": "PutUrlDelivery",
- "type": "object"
- },
- {
- "additionalProperties": false,
- "properties": {
- "callback_url": {
- "description": "Customer endpoint where the optimized bytes will be POSTed. Must be https://. For async/large jobs. We send an X-Pig-Sha256 header of the body so the receiver can verify integrity. No credentials are stored on our side; secure the endpoint with a token in the URL itself.",
- "format": "uri",
- "maxLength": 2083,
- "minLength": 1,
- "title": "Callback Url",
- "type": "string"
- },
- "headers": {
- "anyOf": [
- {
- "additionalProperties": {
- "type": "string"
- },
- "type": "object"
- },
- {
- "type": "null"
- }
- ],
- "description": "Optional headers to include on the POST call (Content-Type, Cache-Control, x-amz-*, etc.). Whitelisted at SSRF layer.",
- "title": "Headers"
- },
- "mode": {
- "const": "callback_url",
- "title": "Mode",
- "type": "string"
- }
- },
- "required": [
- "mode",
- "callback_url"
- ],
- "title": "CallbackDelivery",
- "type": "object"
- }
-]New value: +[
+ {
+ "additionalProperties": false,
+ "properties": {
+ "mode": {
+ "const": "inline",
+ "default": "inline",
+ "title": "Mode",
+ "type": "string"
+ }
+ },
+ "title": "InlineDelivery",
+ "type": "object"
+ },
+ {
+ "additionalProperties": false,
+ "properties": {
+ "headers": {
+ "anyOf": [
+ {
+ "additionalProperties": {
+ "type": "string"
+ },
+ "type": "object"
+ },
+ {
+ "type": "null"
+ }
+ ],
+ "description": "Optional storage headers to include on the PUT call (Content-Type, Cache-Control, x-amz-acl, etc.). Whitelisted at SSRF layer.",
+ "title": "Headers"
+ },
+ "mode": {
+ "const": "put_url",
+ "title": "Mode",
+ "type": "string"
+ },
+ "put_url": {
+ "description": "Customer-signed presigned PUT URL where the optimized bytes will be written. Must be https://. Cloud credentials never reach our infrastructure; only the URL itself is used and discarded after the request.",
+ "format": "uri",
+ "maxLength": 2083,
+ "minLength": 1,
+ "title": "Put Url",
+ "type": "string"
+ }
+ },
+ "required": [
+ "mode",
+ "put_url"
+ ],
+ "title": "PutUrlDelivery",
+ "type": "object"
+ },
+ {
+ "additionalProperties": false,
+ "properties": {
+ "callback_url": {
+ "description": "Customer endpoint where the optimized bytes will be POSTed. Must be https://. For async/large jobs. We send an X-Pig-Sha256 header of the body so the receiver can verify integrity. No credentials are stored on our side; secure the endpoint with a token in the URL itself.",
+ "format": "uri",
+ "maxLength": 2083,
+ "minLength": 1,
+ "title": "Callback Url",
+ "type": "string"
+ },
+ "headers": {
+ "anyOf": [
+ {
+ "additionalProperties": {
+ "type": "string"
+ },
+ "type": "object"
+ },
+ {
+ "type": "null"
+ }
+ ],
+ "description": "Optional headers to include on the POST call (Content-Type, Cache-Control, x-amz-*, etc.). Whitelisted at SSRF layer.",
+ "title": "Headers"
+ },
+ "mode": {
+ "const": "callback_url",
+ "title": "Mode",
+ "type": "string"
+ },
+ "secret": {
+ "anyOf": [
+ {
+ "type": "string"
+ },
+ {
+ "type": "null"
+ }
+ ],
+ "description": "Optional HMAC secret. When set, we sign the POST body with HMAC-SHA256 and send 'X-Pig-Signature: sha256=<hex>'. Used per request and never stored. Recompute the HMAC on your endpoint to authenticate the callback (constant-time compare).",
+ "title": "Secret"
+ }
+ },
+ "required": [
+ "mode",
+ "callback_url"
+ ],
+ "title": "CallbackDelivery",
+ "type": "object"
+ }
+]