Github-Auto-Deploy icon indicating copy to clipboard operation
Github-Auto-Deploy copied to clipboard

Published 20 hours ago • verified publisher icon logsol

Compare HMAC of request body with X-Hub-Signature header

Open charlie-s opened this issue 10 years ago • 1 comments

I think it would be smart to generate the HMAC of the request body using the secret key that's set when configuring the webhook and compare it with the X-Hub-Signature header that GitHub sends in the request.

charlie-s avatar Jul 17 '14 22:07 charlie-s

:+1:

NiclasLindqvist avatar Nov 13 '15 21:11 NiclasLindqvist