How to Validate Incoming Webhooks from Triggers?

This topic was automatically generated from Slack. You can find the original thread here.

Is there any way to validate the incoming webhooks from triggers? A header with a signature or anything?

You can do it within your workflow if you use a regular HTTP trigger to receive the webhooks.

You have to set the trigger to return the raw request.

I mean using app event triggers in the component api. I am not using workflows

So I want to validate that it’s actually pipe dream sending me the webhook not some random person

Hmm not sure if that’s supported yet

You’re using SSE?

No not workflows at all, just using Triggers and Actions/tool calls

That seems like a pretty necessary feature for any webhook system. Otherwise anyone can ping my system pretending to be pipedream

Yea, not yet, Garrett, but it’s on the near term roadmap!

Tracking it here: [FEATURE] Support signature validation for webhook emits from triggers deployed via Connect API · Issue #16396 · PipedreamHQ/pipedream · GitHub