Improve Webhook Management

[tmdrtmdr]

Would be quite useful to be able to add/remove webhooks and events for each webhook from the Android App.

While it is possible to have multiple devices in one account, the implementation could be simplified by just letting each device manage their own webhooks instead of account-wide.

[capcom6]

Let’s separate these into two distinct features.

Webhooks UI

Yes, I’ve already planned to add a read-only UI for webhooks. The primary purpose of this UI will be to review webhook configurations and ensure there are no unwanted webhooks—especially sms:received, which could be exploited by malicious actors to intercept SMS authentication codes if credentials are accidentally exposed.

I intentionally avoid allowing modifications through the UI to maintain a single operational point: the API. If an app sets up a webhook via the API, deleting it through the UI might not suffice, as the app could simply recreate it later.

Webhook Granularity per Device

The multi-device account feature is relatively new, and not all functionalities have been fully adapted to it yet. Supporting device-specific webhooks in addition to account-wide ones is already on the roadmap.