Day 4: API Key Auth & Endpoint Registration — Building a Production-Grade Webhook Gateway

Building a high-performance, stateless Webhook Gateway from scratch using Java 25, Spring Boot 4, and PostgreSQL 18. Day 4 Covered: -Implementing cryptographically secure API key generation (wh_live_...) using SecureRandom and BCrypt hashing -Building a custom ApiKeyAuthenticationFilter to intercept X-API-KEY headers for server-to-server request authorization -Creating clean DTO records and an EndpointService to register destination URLs -Generating unique webhook signing secrets (whsec_...) and testing the full ingestion flow using Bruno GitHub Repository: https://github.com/priyanshu-v1/hook-... Tech Stack: Java 25 | Spring Boot 4 | Spring Security | Spring Data JPA | PostgreSQL 18 | Lombok