Verifying webhook authenticity

[tomasfarias]

The more straight-forward solution seems to be to allow users to provide a secret that is used to sign webhook payload and metadata. Users can then use the secret to verify webhook authenticity.

Although straight-forward, this solution requires proper secret management on our end, and hooks needs to be able to interact with the secret management service.

References

• Standard webhooks