Description
Improve security by verifying incoming webhook payloads using HMAC signatures.
Tasks
Validate request signatures.
Reject invalid payloads.
Support configurable secrets.
Document verification process.
Acceptance Criteria
Only valid webhooks are accepted.
Invalid signatures return appropriate errors.
Verification is covered by tests.
Description
Improve security by verifying incoming webhook payloads using HMAC signatures.
Tasks
Validate request signatures.
Reject invalid payloads.
Support configurable secrets.
Document verification process.
Acceptance Criteria
Only valid webhooks are accepted.
Invalid signatures return appropriate errors.
Verification is covered by tests.