QuestionQ137

VerifiedOrchestrator and Automation Cloud

How should client applications compute the signature when they receive Orchestrator requests and must verify their authenticity?

Drag & Drop
Explanation

Webhook authenticity is verified by retrieving the signature header, Base64-decoding its encoded signature, computing the SHA256 signature with the shared signing key, and comparing the resulting signatures.

Community Discussion

No comments yet. Be the first to start the discussion!