Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider adding support for message authentication #8

Open
chrishiestand opened this issue May 31, 2014 · 0 comments
Open

Consider adding support for message authentication #8

chrishiestand opened this issue May 31, 2014 · 0 comments

Comments

@chrishiestand
Copy link

Support could be added either directly or by ensuring it's easy for a third party package to extend webhooks with this functionality.

Some uses of webhooks may allow for multiple senders with different permissions or handle sensitive data that needs to be verified to be both accurate and authenticated.

One solution to this problem is HMAC which uses a shared secret key and is already implemented in the Python Standard Library:
https://docs.python.org/3.4/library/hmac.html

As a point of comparison, you can see how the financial service Dwolla uses HMAC for their webhooks:
https://developers.dwolla.com/dev/pages/webhooks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant