API 1 min read

How are OpsIQ outbound webhooks signed?

How are OpsIQ outbound webhooks signed?

OpsIQ signs outbound webhook payloads using HMAC-SHA256 over the raw request body. It also includes delivery metadata such as the timestamp and event. Receivers should follow these steps:

  1. Calculate the signature from the exact raw body.
  2. Compare the calculated signature in constant time.
  3. Validate the timestamp.
  4. Process repeated deliveries idempotently.

Related articles