Welcome, Guest Login

Support Center

Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

webhook sender validation

Sune Apr 12, 2017 04:08PM CEST

Hi there,
I want to use the Memsource webhook to get notified when a job status is changed, but how can I be sure, that it is Memsource who is the sender. I've used other webhooks with a secret, so that sender and receiver knows each other, but it doesn't seems to be a possibility with memsource webhooks. So how could we be sure that memsource is the sender (I don't want to allow others to call my endpoint)?

Up 0 rated Down
Katerina Benova Apr 12, 2017 04:16PM CEST Memsource Help Center Agent

Hello Sune,

Unfortunately Memsource doesn’t support such validation.
Let me discuss with our team if we could implement such feature in the future.

Up 0 rated Down
Sune Apr 12, 2017 04:45PM CEST
Hello Katerina,

Thank you for the fast response. I could possibly make a whitelist for the memsource ip addresses, but a secret would be much more convenient.

Thank you for taking it to the development team
Up 0 rated Down
Katerina Benova Apr 12, 2017 05:10PM CEST Memsource Help Center Agent

Hello Sune,

Our developer got back to me with solution: You can add the secret in the query string of the webhook URL.

Up 0 rated Down
Sune Apr 14, 2017 11:56AM CEST
Hello Katerina,
thank your for the fast response.

I will try the solution they proposed, thank you.

Post Your Public Answer

Your name (required)
Your email address (required)
Answer (required)
support@memsource.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete