refactor: centralize outbound User-Agent in config('app.user_agent')

Author: Paulo Castellano

.env.example

@@ -174,8 +174,6 @@ REDDIT_ENABLED=true
 REDDIT_CLIENT_ID=
 REDDIT_CLIENT_SECRET=
 REDDIT_CLIENT_REDIRECT="${APP_URL}/accounts/reddit/callback"
-# Optional — defaults to TRYPOST_USER_AGENT. Reddit recommends "platform:appid:version (by /u/username)".
-# REDDIT_USER_AGENT=
 REDDIT_SCOPES="identity,read,submit,flair,mysubreddits"
 
 # AI Services

CLAUDE.md

@@ -338,8 +338,7 @@ Vue components must have a single root element.
 
 ## HTTP User-Agent
 
-- NEVER hardcode a custom `User-Agent` string for outbound HTTP. There is ONE shared default: `config('trypost.user_agent')` (`env('TRYPOST_USER_AGENT', ...)`). Use it for any outbound request that needs a UA.
-    - If a provider REQUIRES its own UA (e.g. Reddit's API mandates a unique descriptive User-Agent), add a per-platform key under `config/trypost.php` `platforms.<name>.user_agent` that DEFAULTS to the shared one — `env('<PLATFORM>_USER_AGENT', $userAgent)` where `$userAgent` is the hoisted shared value — never a fresh hardcoded literal.
+- NEVER hardcode a `User-Agent` string for outbound HTTP, and NEVER add a per-platform or per-feature user-agent config key. There is ONE source of truth: `config('app.user_agent')` (backed by `env('TRYPOST_USER_AGENT', ...)` in `config/app.php`). Every outbound request that needs a UA — automation webhook/http nodes, social provider APIs (Reddit, etc.), anything — reads `config('app.user_agent')`.
 
 ## TryPost.it Documentation
 

app/Actions/Automation/Node/RunHttpRequestNode.php

@@ -364,7 +364,7 @@ private function buildRequest(array $config, array $context): PendingRequest
             $request = $request->withHeaders($headers);
         }
 
-        return $request->withUserAgent(config('trypost.user_agent'));
+        return $request->withUserAgent(config('app.user_agent'));
     }
 
     /**

app/Actions/Automation/Node/RunWebhookNode.php

@@ -74,7 +74,7 @@ public function __invoke(AutomationRun $run, array $config): NodeRunResult
 
         try {
             $response = Http::withHeaders($headers)
-                ->withUserAgent(config('trypost.user_agent'))
+                ->withUserAgent(config('app.user_agent'))
                 ->send($method, $url, ['json' => $payload]);
         } catch (Throwable $e) {
             return NodeRunResult::failed(__('automations.errors.webhook_request_failed'), [

app/Services/Social/ConnectionVerifier.php

@@ -543,7 +543,7 @@ private function verifyMastodon(SocialAccount $account): bool
     private function verifyReddit(SocialAccount $account): bool
     {
         $response = Http::withToken((string) $account->access_token)
-            ->withHeaders(['User-Agent' => (string) config('trypost.platforms.reddit.user_agent')])
+            ->withHeaders(['User-Agent' => (string) config('app.user_agent')])
             ->get(config('trypost.platforms.reddit.api').'/api/v1/me');
 
         if (in_array($response->status(), [401, 403], true)) {
@@ -561,7 +561,7 @@ private function refreshRedditToken(SocialAccount $account): void
 
         $response = TokenRefreshClient::for(Platform::Reddit)->send(fn () => Http::asForm()
             ->withBasicAuth((string) config('services.reddit.client_id'), (string) config('services.reddit.client_secret'))
-            ->withHeaders(['User-Agent' => (string) config('trypost.platforms.reddit.user_agent')])
+            ->withHeaders(['User-Agent' => (string) config('app.user_agent')])
             ->post(config('trypost.platforms.reddit.oauth_api').'/access_token', [
                 'grant_type' => 'refresh_token',
                 'refresh_token' => $account->refresh_token,

app/Services/Social/Reddit/RedditClient.php

@@ -135,6 +135,6 @@ private function reddit(SocialAccount $account): PendingRequest
     {
         return $this->socialHttp()
             ->withToken((string) $account->access_token)
-            ->withHeaders(['User-Agent' => (string) config('trypost.platforms.reddit.user_agent')]);
+            ->withHeaders(['User-Agent' => (string) config('app.user_agent')]);
     }
 }

app/Services/Social/Reddit/RedditPublisher.php

@@ -312,6 +312,6 @@ private function reddit(SocialAccount $account): PendingRequest
     {
         return $this->socialHttp()
             ->withToken((string) $account->access_token)
-            ->withHeaders(['User-Agent' => (string) config('trypost.platforms.reddit.user_agent')]);
+            ->withHeaders(['User-Agent' => (string) config('app.user_agent')]);
     }
 }

app/Socialite/RedditProvider.php

@@ -50,7 +50,7 @@ public function getAccessTokenResponse($code): array
             'auth' => [config('services.reddit.client_id'), config('services.reddit.client_secret')],
             'headers' => [
                 'Accept' => 'application/json',
-                'User-Agent' => config('trypost.platforms.reddit.user_agent'),
+                'User-Agent' => config('app.user_agent'),
             ],
             'form_params' => [
                 'grant_type' => 'authorization_code',
@@ -70,7 +70,7 @@ protected function getUserByToken($token): array
         $response = $this->getHttpClient()->get(config('trypost.platforms.reddit.api').'/api/v1/me', [
             'headers' => [
                 'Authorization' => "Bearer {$token}",
-                'User-Agent' => config('trypost.platforms.reddit.user_agent'),
+                'User-Agent' => config('app.user_agent'),
             ],
         ]);
 

config/app.php

@@ -69,6 +69,19 @@
 
     'webhook_url' => env('WEBHOOK_URL', env('APP_URL', 'https://app.trypost.it')),
 
+    /*
+    |--------------------------------------------------------------------------
+    | Outbound User-Agent
+    |--------------------------------------------------------------------------
+    |
+    | Single, branded User-Agent for every outbound HTTP request the app makes
+    | (automation webhook/http nodes, social provider APIs, etc.). Centralized
+    | here so there is one source of truth; self-hosters can override it.
+    |
+    */
+
+    'user_agent' => env('TRYPOST_USER_AGENT', 'TryPost.it/1.0 (+https://trypost.it)'),
+
     /*
     |--------------------------------------------------------------------------
     | Application Timezone

config/trypost.php

@@ -2,8 +2,6 @@
 
 declare(strict_types=1);
 
-$userAgent = env('TRYPOST_USER_AGENT', 'TryPost.it/1.0 (+https://trypost.it)');
-
 return [
 
     /*
@@ -61,19 +59,6 @@
     |
     */
 
-    /*
-    |--------------------------------------------------------------------------
-    | Outbound User-Agent
-    |--------------------------------------------------------------------------
-    |
-    | Branded User-Agent applied to outbound HTTP from automation nodes
-    | (webhook + http_request) so recipients know the request came from
-    | TryPost.it. Self-hosters can override it.
-    |
-    */
-
-    'user_agent' => $userAgent,
-
     'google_auth_enabled' => env('GOOGLE_AUTH_ENABLED', false),
 
     'github_auth_enabled' => env('GITHUB_AUTH_ENABLED', false),
@@ -182,7 +167,6 @@
             'enabled' => env('REDDIT_ENABLED', true),
             'api' => env('REDDIT_API', 'https://oauth.reddit.com'),
             'oauth_api' => env('REDDIT_OAUTH_API', 'https://www.reddit.com/api/v1'),
-            'user_agent' => env('REDDIT_USER_AGENT', $userAgent),
             'scopes' => array_values(array_filter(array_map('trim', explode(',', (string) env('REDDIT_SCOPES', 'identity,read,submit,flair,mysubreddits'))))),
         ],
     ],