Webhook Secret

Quick Knowledge Check

Test what you learned

• What should your app do before trusting a webhook?

  • Trust the request because it came from the internet
  • Verify the incoming event using the provider’s signing method and webhook secret
  • Reply immediately, then verify later