accounts/console/models/WebHookForm.php

<?php
declare(strict_types=1);

namespace console\models;

use common\models\WebHook;
use common\notifications;
use Webmozart\Assert\Assert;
use yii\base\Model;

class WebHookForm extends Model {

    public string $url;

    public string $secret;

    /**
     * @var string[]
     */
    public array $events = [];

    public function __construct(
        private WebHook $webHook,
        array $config = [],
    ) {
        parent::__construct($config);
        $this->url = $this->webHook->url;
        $this->secret = $this->webHook->secret;
        $this->events = $this->webHook->events;
    }

    public function rules(): array {
        return [
            [['url'], 'required'],
            [['url'], 'url'],
            [['secret'], 'string'],
            [['events'], 'in', 'range' => static::getEvents(), 'allowArray' => true],
        ];
    }

    public function save(): bool {
        if (!$this->validate()) {
            return false;
        }

        $webHook = $this->webHook;
        $webHook->url = $this->url;
        $webHook->secret = $this->secret;
        $webHook->events = array_values($this->events); // Drop the keys order
        Assert::true($webHook->save(), 'Cannot save webhook.');

        return true;
    }

    public static function getEvents(): array {
        return [
            notifications\AccountEditNotification::getType(),
            notifications\AccountDeletedNotification::getType(),
            notifications\OAuthSessionRevokedNotification::getType(),
        ];
    }

}