Signature verification - add mechanism #542
Unanswered
LumpiStefan
asked this question in
Q&A
Replies: 1 comment 4 replies
-
Webhook doesn't allow you to append to the HMAC data prior to validation. The best approach today would be to handle this validation in an external script. |
Beta Was this translation helpful? Give feedback.
4 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Now i have the next issue, but I expect that this may be more an feature request...
I´m trying to use the signature to verify the correct usage of the webhook.
The webhook-sender is sending two headers:
-Signature
-Timestamp
Signature is the HMAC SHA-256 of the request body. Timestamp contains a timestamp associated with this request.
Now the problem is, that the timestamp is included in the HMAC calculation.
Complete documentation of the process is here: https://help.usersnap.com/docs/webhook
Any idea how I solve this? Any prebuild function for this?
Stefan
Beta Was this translation helpful? Give feedback.
All reactions