Add HMAC payload signing for General Webhooks
General Webhooks authenticate via a token in the URL works, but URL tokens can leak through server logs and proxies.
this is usually solved with HMAC-SHA256 signing. A signature header computed from the request body using a shared secret. The receiver verifies the hash, the URL stays non-sensitive.
We're building on the Connector API and had to add workarounds to compensate.
Would be great to have this natively.
1
vote
Katia
shared this idea