Webhook validity check

[Zalayeta (Mathieu)]

Hi,

I understand that you validate the route to our api sending a challenge that we have to send back once.
But then on our api side, how do we ensure the request comes from monday and its not someone else sending the request?

Cheers,

[dipro (Dipro Bhowmik)]

Hey @Zalayeta – we don’t have a mechanism for checking the validity of a webhook yet, but it’s a great idea! I’ve moved this to the feature request section so more people see it

[morhriveion (Robert Hollon)]

I had the same question last week. This is a must have.

[Venkateshwaran (Venkateshwaran Krishnakumar)]

Any update on this? I have seen same kind of post here as well. Verify webhook origin as Monday.com