Secure API Webhooks
Currently API Webhooks do not have any identity verification, so teoretically they can be called by a bad person, who could trigger our system to do some processing unnecessarily (update property or similar). We would like to have some authentication or identity verification method so we would be sure with identity of source system. This method can be simple:
- Basic authenticiation
- secret code
- generated token or any other similar method.
This improvement request is based on our discussion with Hostfully representant on 04-14-2021.
5
votes
Václav Lipert
shared this idea