New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Verify Webhook Events #25

Open

subomi opened this issue Mar 24, 2022 · 0 comments

subomi commented Mar 24, 2022

Immune callbacks should validate webhook events. It means when a callback receives an event. It should:

Sign the payload with the shared secret.
Compare the derived hash with the header's hash.

A success in step 2 indicates a successful test else a failure.

This feature is essential for verifying that Convoy is signing the payload properly, and bugs like this don't repeat themselves.

danvixent mentioned this issue

check callback signature header #37

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment