Closed maikelmclauflin closed 7 years ago
@mmclau14 You're getting this error because your refreshSecret
doesn't match the secret you have configured in your repo's webhook settings. They need to be the same otherwise, you'll get different SHA1 signatures.
Those signatures are to ensure that it is indeed GitHub sending that webhook (using the secret you gave them to sign the payload) and not some malicious 3rd party sending a POST
request to your webhook pretending to be GitHub.
somehow I am getting this error
I have switched my refreshSecret multiple times. cannot seem to get it to do anything correctly. below is my server