CAMEL-23762: camel-whatsapp - support X-Hub-Signature-256 verification of inbound webhook payloads

[oscerd]

Description

The camel-whatsapp webhook consumer forwards inbound event callbacks to the route without verifying their authenticity. WhatsApp/Meta signs event payloads with an X-Hub-Signature-256 header (HMAC-SHA256 of the raw request body keyed by the app secret).

This adds a webhookSecret endpoint option:

• When set, inbound event callbacks whose X-Hub-Signature-256 signature is missing or does not match are rejected with HTTP 403, using a constant-time comparison.
• When not set, behaviour is unchanged (no signature verification).

This mirrors the signature verification already provided by camel-clickup.

Testing

Adds WhatsAppWebhookSignatureTest covering valid, invalid, missing, tampered-payload and wrong-secret cases.

Claude Code on behalf of Andrea Cosentino.

🤖 Generated with Claude Code

[github-actions]

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

• First-time contributors require MANUAL approval for the GitHub Actions to run
• You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
• You can label PRs using skip-tests and test-dependents to fine-tune the checks executed by this PR.
• Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

[github-actions]

🧪 CI tested the following changed modules:

• catalog/camel-catalog
• components/camel-whatsapp
• dsl/camel-endpointdsl

All tested modules (10 modules)

• Camel :: Catalog :: Camel Catalog
• Camel :: Endpoint DSL
• Camel :: JBang :: MCP
• Camel :: JBang :: Plugin :: Route Parser
• Camel :: JBang :: Plugin :: TUI
• Camel :: JBang :: Plugin :: Validate
• Camel :: Launcher :: Container
• Camel :: Whatsapp
• Camel :: YAML DSL :: Validator
• Camel :: YAML DSL :: Validator Maven Plugin

---

⚙️ View full build and test results