Hi!
I’m trying using the webhook integration in my board so it will send an event when column gets changed.
when setting the webhook at its first time it asks me to make the “challenge” only
I’d like to have the ability to set the request that will be sent to my endpoint as for instance adding new headers as authentication or api key
is that possible?
Authenticate webhook integration
Hello there @Avisw,
It is not possible to add custom headers directly in the calls made from the monday servers.
Let me know if you have any other questions 🙂
Cheers,
Matias
Hello,
Have there been any updates to this simple challenge-response handshake authentication?
Wouldn’t this be somewhat insecure for sending any kind of even moderately-sensitive data via webhook?
Minimally we should be able to add an API_KEY header (perhaps some users could opt out if they found this method to be onerous). I see the list of white-listable IP addresses referred to in the documentation; again, this seems insufficient for truly sensitive data.
Thank you for any clarification on this matter.
Best,
Ches CC
Hello there @Ches-CC,
It is still not possible to add custom headers.
You can use a custom action, or create a webhook via API using an apps OAuth token or shortLivedToken. And in those cases, the request coming from monday.com would have an “Authorization” header with a JWT that you can decode using your app’s credentials to check that the request is coming from monday 😀
Login to monday.com
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.