Probot: Receiving webhooks that are not from GitHub

[zeke]

I am working on a Probot app that receives webhooks from both GitHub and Crowdin. I am getting this error on incoming webhooks from Crowdin:

ERROR probot: Go to https://github.com/settings/apps/YOUR_APP and verify that the Webhook secret matches the value of the WEBHOOK_SECRET environment variable.

Error: Required headers missing: x-github-event, x-hub-signature, x-github-delivery

Crowdin webhooks don't support shared secrets. Is there a way to bypass or configure Probot's webhook requirements?

cc @andrulko

[issue-label-bot[bot]]

Issue-Label Bot is automatically applying the label bug 🐞 to this issue, with a confidence of 0.68. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

[zeke]

Note: WEBHOOK_SECRET is not defined in my environment.

[JasonEtco]

@zeke I'd recommend registering a separate route for the Crowdin webhooks. Because Probot is really just a stacked up Express server with middleware, there's no way to by-pass those checks for the default Probot webhook route.

You can do:

app.route('/crowdin').post('/', (req, res) => {})

You can also modify the default webhook path:

https://github.com/probot/probot/blob/bf354ffc80835908394f509586407b4cd35570b3/src/index.ts#L45

[zeke]

Thanks @JasonEtco 👍