feat: allow setting custom CA for generic webhooks (#203)

* feat: allow setting custom CA for generic webhooks

PiperOrigin-RevId: 408995680

Source-Link: googleapis/googleapis@76f7f48

Source-Link: googleapis/googleapis-gen@9e5faa6
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiOWU1ZmFhNjJhMjM4YmQ0MmMxMzUwZDNlNTFhNjU0MGFmNzMzNzU4NyJ9

* 🦉 Updates from OwlBot

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

* 🦉 Updates from OwlBot

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

protos/google/cloud/dialogflow/cx/v3beta1/audio_config.proto

@@ -31,6 +31,31 @@ option java_package = "com.google.cloud.dialogflow.cx.v3beta1";
 option objc_class_prefix = "DF";
 option ruby_package = "Google::Cloud::Dialogflow::CX::V3beta1";
 
+// Information for a word recognized by the speech recognizer.
+message SpeechWordInfo {
+  // The word this info is for.
+  string word = 3;
+
+  // Time offset relative to the beginning of the audio that corresponds to the
+  // start of the spoken word. This is an experimental feature and the accuracy
+  // of the time offset can vary.
+  google.protobuf.Duration start_offset = 1;
+
+  // Time offset relative to the beginning of the audio that corresponds to the
+  // end of the spoken word. This is an experimental feature and the accuracy of
+  // the time offset can vary.
+  google.protobuf.Duration end_offset = 2;
+
+  // The Speech confidence between 0.0 and 1.0 for this word. A higher number
+  // indicates an estimated greater likelihood that the recognized word is
+  // correct. The default of 0.0 is a sentinel value indicating that confidence
+  // was not set.
+  //
+  // This field is not guaranteed to be fully stable over time for the same
+  // audio input. Users should also not rely on it to always be provided.
+  float confidence = 4;
+}
+
 // Audio encoding of the audio content sent in the conversational query request.
 // Refer to the
 // [Cloud Speech API
@@ -80,31 +105,6 @@ enum AudioEncoding {
   AUDIO_ENCODING_SPEEX_WITH_HEADER_BYTE = 7;
 }
 
-// Information for a word recognized by the speech recognizer.
-message SpeechWordInfo {
-  // The word this info is for.
-  string word = 3;
-
-  // Time offset relative to the beginning of the audio that corresponds to the
-  // start of the spoken word. This is an experimental feature and the accuracy
-  // of the time offset can vary.
-  google.protobuf.Duration start_offset = 1;
-
-  // Time offset relative to the beginning of the audio that corresponds to the
-  // end of the spoken word. This is an experimental feature and the accuracy of
-  // the time offset can vary.
-  google.protobuf.Duration end_offset = 2;
-
-  // The Speech confidence between 0.0 and 1.0 for this word. A higher number
-  // indicates an estimated greater likelihood that the recognized word is
-  // correct. The default of 0.0 is a sentinel value indicating that confidence
-  // was not set.
-  //
-  // This field is not guaranteed to be fully stable over time for the same
-  // audio input. Users should also not rely on it to always be provided.
-  float confidence = 4;
-}
-
 // Instructs the speech recognizer on how to process the audio content.
 message InputAudioConfig {
   // Required. Audio encoding of the audio content to process.

protos/google/cloud/dialogflow/cx/v3beta1/webhook.proto

@@ -113,6 +113,19 @@ message Webhook {
     // The HTTP request headers to send together with webhook
     // requests.
     map<string, string> request_headers = 4;
+
+    // Optional. Specifies a list of allowed custom CA certificates (in DER format) for
+    // HTTPS verification. This overrides the default SSL trust store. If this
+    // is empty or unspecified, Dialogflow will use Google's default trust store
+    // to verify certificates.
+    // N.B. Make sure the HTTPS server certificates are signed with "subject alt
+    // name". For instance a certificate can be self-signed using the following
+    // command,
+    //    openssl x509 -req -days 200 -in example.com.csr \
+    //      -signkey example.com.key \
+    //      -out example.com.crt \
+    //      -extfile <(printf "\nsubjectAltName='DNS:www.example.com'")
+    repeated bytes allowed_ca_certs = 5 [(google.api.field_behavior) = OPTIONAL];
   }
 
   // Represents configuration for a [Service