I want to use the Memsource webhook to get notified when a job status is changed, but how can I be sure, that it is Memsource who is the sender. I've used other webhooks with a secret, so that sender and receiver knows each other, but it doesn't seems to be a possibility with memsource webhooks. So how could we be sure that memsource is the sender (I don't want to allow others to call my endpoint)?
Unfortunately Memsource doesn’t support such validation.
Let me discuss with our team if we could implement such feature in the future.
Our developer got back to me with solution: You can add the secret in the query string of the webhook URL.