Is there or will there be any kind of authentication?
dAnjou
All 2 comments
What exactly do you mean by authentication? The HTTP Basic Auth, or do you just want to verify the source of the request?
Currently the webhook providers such as Github and Slack for example, use tokens and signatures to ensure you the payload and the requests are coming from the trusted source (only you and the webhook source know that secret).
You can use that information in combination with the trigger-rule to verify and authorize only them to trigger your script.
If you want to restrict the sources the requests are coming from, you can use firewall on the machine, and for the basic authentication you can put webhook behind the nginx instance and set up authentication on the nginx. Basically using NGINX Basic Auth and NGINX Proxy Module.
adnanh
on 19 Mar 2015
That makes sense. Thanks.
dAnjou
on 22 Mar 2015
Related issues
macau23
路
6Comments
zoenglinghou
路
4Comments
wranitzky
路
6Comments
foosinn
路
5Comments
Gareth-3aaa
路
4Comments
Most helpful comment
What exactly do you mean by authentication? The HTTP Basic Auth, or do you just want to verify the source of the request?
Currently the webhook providers such as Github and Slack for example, use tokens and signatures to ensure you the payload and the requests are coming from the trusted source (only you and the webhook source know that secret).
You can use that information in combination with the trigger-rule to verify and authorize only them to trigger your script.
If you want to restrict the sources the requests are coming from, you can use firewall on the machine, and for the basic authentication you can put webhook behind the nginx instance and set up authentication on the nginx. Basically using NGINX Basic Auth and NGINX Proxy Module.