Signature verification - add mechanism #542
Unanswered
LumpiStefan
asked this question in
Q&A
Replies: 1 comment 4 replies
-
|
Webhook doesn't allow you to append to the HMAC data prior to validation. The best approach today would be to handle this validation in an external script. |
Beta Was this translation helpful? Give feedback.
4 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Now i have the next issue, but I expect that this may be more an feature request...
I´m trying to use the signature to verify the correct usage of the webhook.
The webhook-sender is sending two headers:
-Signature
-Timestamp
Signature is the HMAC SHA-256 of the request body. Timestamp contains a timestamp associated with this request.
Now the problem is, that the timestamp is included in the HMAC calculation.
Complete documentation of the process is here: https://help.usersnap.com/docs/webhook
Any idea how I solve this? Any prebuild function for this?
Stefan
Beta Was this translation helpful? Give feedback.
All reactions