How can you check that a webhook update is sent from Monday?

[Andy_Monday (Andreas Gustafsson)]

Hello!

I have successfully integrated Monday webhooks to my project, but now I wish to make it secure as well. What can I do to ensure that the data I receive is actually sent from Monday?

This seems to be the same question as can be found here

Webhook validity check

Hi, I understand that you validate the route to our api sending a challenge that we have to send back once. But then on our api side, how do we ensure the request comes from monday and its not someone else sending the request? Cheers,

However that post has not gotten an answer yet at the time of this post so I figured it would be best to make a new post about it.

Kind regards

[Zalayeta (Mathieu)]

@Andy_Monday its the same question and I’m still waiting for an answer.
I’m afraid monday webhooks are not secured at the moment but I’m happy I’m not the only one caring.

Cheers

[dipro (Dipro Bhowmik)]

@Andy_Monday – good point! Would love you to upvote the feature request Webhook validity check

[Andy_Monday (Andreas Gustafsson)]

I have also voted for it now.
Thanks for opening my eyes to that there was a vote system.

[dipro (Dipro Bhowmik)]

Yeah! Only items in the Feature Feedback section can be voted for though