Skip to main content

Hi!

I’m trying using the webhook integration in my board so it will send an event when column gets changed.

when setting the webhook at its first time it asks me to make the “challenge” only

I’d like to have the ability to set the request that will be sent to my endpoint as for instance adding new headers as authentication or api key

is that possible?

Hello there @Avisw,


It is not possible to add custom headers directly in the calls made from the monday servers.


Let me know if you have any other questions 🙂


Cheers,

Matias

Hello,


Have there been any updates to this simple challenge-response handshake authentication?


Wouldn’t this be somewhat insecure for sending any kind of even moderately-sensitive data via webhook?


Minimally we should be able to add an API_KEY header (perhaps some users could opt out if they found this method to be onerous). I see the list of white-listable IP addresses referred to in the documentation; again, this seems insufficient for truly sensitive data.


Thank you for any clarification on this matter.


Best,

Ches CC

Hello there @Ches-CC,


It is still not possible to add custom headers.


You can use a custom action, or create a webhook via API using an apps OAuth token or shortLivedToken. And in those cases, the request coming from monday.com would have an “Authorization” header with a JWT that you can decode using your app’s credentials to check that the request is coming from monday 😀

Terrific, thank you for clarifying 🙏

Happy to help @Ches-CC !

Reply


Terms & ConditionsCookie settings