iachat/app
Tanmay Deep Sharma 3c8abd5b30
fix: Twilio authentication handling for WhatsApp attachments (#11536)
# Pull Request Template

## Description

This PR addresses an issue where users were unable to view images sent
via WhatsApp on Chatwoot due to incorrect Twilio authentication
configuration.
https://app.chatwoot.com/app/accounts/1/conversations/50824

The problem stemmed from how authentication was being handled for Twilio
API requests. The user had configured their inbox using api_key_sid, but
the backend logic used only auth_token, leading to failed
authentication. Further investigation showed that some customers might
input api_secret into the auth_token field unintentionally.

## Type of change

- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality not to work as expected)
- [ ] This change requires a documentation update

## How Has This Been Tested?

- Tested on console with Client(api_key_sid, auth_token, account_sid)
and validated successful authentication for the customer (Twilio channel
ID: 2702).
- Simulated toggling the “Use API Key Authentication” checkbox to ensure
backend behavior matches UI intent
- Verified image rendering by testing with the same image URL that was
previously failing for the user.

## Checklist:

- [x] My code follows the style guidelines of this project
- [x] I have performed a self-review of my code
- [x] I have commented on my code, particularly in hard-to-understand
areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [x] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [x] Any dependent changes have been merged and published in downstream
modules

---------

Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com>
2025-05-21 18:40:15 +05:30
..
actions chore: Avoid contact inboxes getting deleted (#10612) 2024-12-26 16:17:38 +05:30
assets chore: Update styles in settings pages (#11070) 2025-03-18 14:40:02 -07:00
builders fix: account email validation during signup (#11307) 2025-05-20 20:45:39 -07:00
channels fix: Move contact events to account stream rather than individual user stream (#11082) 2025-03-13 17:46:48 -07:00
controllers fix: account email validation during signup (#11307) 2025-05-20 20:45:39 -07:00
dashboards chore: improve plan-based feature handling with plan hierarchy (#11335) 2025-04-28 14:13:56 -07:00
dispatchers feat(ee): Add Captain features (#10665) 2025-01-14 16:15:47 -08:00
drops feat: Add the support for custom attributes in message variables (#8511) 2023-12-08 14:13:35 -08:00
fields chore: improve plan-based feature handling with plan hierarchy (#11335) 2025-04-28 14:13:56 -07:00
finders feat: Add support for search_conversations in copilot (#11520) 2025-05-20 19:22:17 -07:00
helpers chore: improve plan-based feature handling with plan hierarchy (#11335) 2025-04-28 14:13:56 -07:00
javascript feat: Add components to show steps in the copilot thinking process (#11530) 2025-05-20 21:35:29 -07:00
jobs fix: throttle stalecontacts job (#11430) 2025-05-08 20:05:08 -07:00
listeners feat: Add support for typing events in webhooks (#11423) 2025-05-08 17:28:35 -07:00
mailboxes fix: Process non-image inline attachments as regular attachments (#10998) 2025-02-28 13:33:48 -08:00
mailers chore: Increase the timeout to support slow SMTP servers (#10318) 2025-04-16 12:15:49 +05:30
models feat: Prevent saving preferences and status when impersonating (#11164) 2025-05-20 17:34:30 -07:00
policies chore: Clean up report & knowledge base policies (#11234) 2025-04-03 16:00:32 -07:00
presenters chore: Update the precision of the updated_at timestamp in conversation model (#10875) 2025-02-10 20:22:11 -08:00
services fix: Twilio authentication handling for WhatsApp attachments (#11536) 2025-05-21 18:40:15 +05:30
views feat: Prevent saving preferences and status when impersonating (#11164) 2025-05-20 17:34:30 -07:00
workers feat: API Endpoints to update message status (#11387) 2025-04-29 15:33:11 -07:00