Warm tip: This article is reproduced from serverfault.com, please click

http http-headers security webhooks zapier

Accessing request headers with Zapier Webhook triggers

发布于 2017-09-12 13:47:18

Is there a way to retrieve HTTP Headers when using Zapier Webhook triggers? With Catch Hook and Catch Raw Hook triggers the headers doesn't seem to be available in later steps (even using a Code step).

For example with something like:

curl -H 'Content-Type: application/json' \
     -H 'x-webhook-signature: abc123!'
     POST -d '{"secret": "I am a banana"}'
     https://hooks.zapier.com/hooks/catch/123/abc/

How to read the value of x-webhook-signature value in a Zapier in or after a Webhook trigger?

This is especially important for us as the headers contains authentication information without which we cannot verify the authenticity nor the identity of the sender. It's a great security issue.

Questioner

Pierre B.

Viewed

0

xavdid 2017-09-16 04:28:53

David here, from the Zapier Platform team.

Sorry to be the bearer of bad news, but this isn't something we currently support in our webhooks app. If the proxy server isn't an option, it might be possible to write a custom CLI app to catch your hooks. It has access to the incoming header and could copy that information into the body. The tricky part of that is that you no longer have the benefit of a single URL to throw hooks at - each zaps broadcasts its url when it's turned on. Success would depend on being able to capture that broadcast somewhere and adjust your data accordingly.

Again, sorry this isn't possible now. Let me know if you've got any other questions!

Pierre B. 2017-09-17 13:18:00

Thanks David, I'll take a look into that. Any chance you will add a this as a new feature to the Zapier Webhook trigger in the (near) future?

xavdid 2017-09-18 18:10:50

Yes indeed! I've made a note about it in or internal feature tracker. We'll probably comment here if it ever gets made (normally we take an email, but this question works fine)

mrded 2020-11-26 16:57:03

If you move a payload signature from header to the payload - the signature will change.

热门帖子

1

学英语的朋友们可以来看看 https://langplayground.top/

2

华中科大的计算机技术的在职硕士，职场认可度如何？

3

十兆宽带 100 块钱一个月我是活在 80 年代吗？

4

关于高质量屏幕共享的问题

5

我是真的受不了打小报告的三八了！

6

怎么管理自己的文件体系

7

[开发者自荐] AirBattery: 在 Mac 端获取所有设备的电量并显示在 Dock 或状态栏上

8

南京移动 IPV6 被停

9

WireGuard 跨国组网失败后,一个新工具的诞生

10

你的 IDEA(2024.1) 在 macOS 上崩吗？

热门github

1

Implementation of paper - YOLOv9: Learning What You Want to Learn Using Programmable Gradient Information

2

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

3

Get up and running with Llama 2, Mistral, Gemma, and other large language models.

4

该项目可以让你通过订阅的方式使用Cloudflare WARP+，自动获取流量。This project enables you to use Cloudflare WARP+ through subscription, automatically acquiring traffic.

5

Multi functional app to find duplicates, empty folders, similar images etc.

6

Xray panel supporting multi-protocol multi-user expire day & traffic & ip limit (Vmess & Vless & Trojan & ShadowSocks & Wireguard)

7

The Free Software Media System

8

lightweight, standalone C++ inference engine for Google's Gemma models.

9

📚 Freely available programming books

10

A collective list of free APIs

11

1️⃣🐝🏎️ The One Billion Row Challenge -- A fun exploration of how quickly 1B rows from a text file can be aggregated with Java

12

🎓 Path to a free self-taught education in Computer Science!

13

Curso para aprender el lenguaje de programación Python desde cero y para principiantes. 75 clases, 37 horas en vídeo, código, proyectos y grupo de chat. Fundamentos, frontend, backend, testing, IA...

14

This repository contains System Design resources which are useful while preparing for interviews and learning Distributed Systems

15

Mamba is a new state space model architecture showing promising performance on information-dense data such as language modeling, where previous subquadratic models fall short of Transformers. It is based on the line of progress on structured state space models, with an efficient hardware-aware design and implementation in the spirit of FlashAttention.