Webhooks in Nettalk?

[AtoB]

Hi All,

I'm about to add webhook functionality to my api-server (so I'm the consumer in this case).

- is there any functionality already in place with Nettalk (14), maybe some examples in the example apps?
- is it good practice to implement HMAC validation and can I do this with Nettalk?
- is there any standard that is actual standard (I see quite different implementations all over the place ...)?

TIA,

regards,
Ton

[osquiabro]

well i have a webhook for listener stripe transaction, telegram and Alexa, is a simple netwebservicemethod

[AtoB]

Do  you have HMAC validation in place?

I don't have to interface with a relatively '"standard" provider, but I'm trying to design a webhook system so relatively small B2B partners have to follow "my" standard, that's why I want to setup it properly in advance ...

[rjolda]

Hi,
HMAC is a method in Capesoft Cryptonite. Using it regularly in my NT Web App. I am using it to validate the Text that I place in a QR code when the QR code is created.  When the user displays the QR code to the reader, we calculate the HMAC of the string read from the QR code to make certain it has not been tampered with.  wouldn't be without it!
Ron

[AtoB]

Hi all,

the thing is: what is good practice? For example I see the following implementations of the HMAC string to validate:

- messageId.timestamp.body (looks most sensible to me ...)
- timestamp.body
- variants without dots ...

Even how the labels of the http-headers are constructed seem to vary ("webhook-timestamp" seems most common)

I was hoping Nettalk maybe had this already under the hood.

B.t.w. currently out of office and running to the shop buying Cryptonite ...

Regards,
Ton