Closed Schachte closed 6 years ago
I dove a bit more into https://developer.github.com/webhooks/securing/. Looks like I could just throw the desired payload data in as the string with my token as the secret and the hash validates as the X-Hub-Signature. Events were pulled off the docs. Not sure if the GUID matters in thie case?
I used this hashing algorithm tool: https://www.freeformatter.com/hmac-generator.html#ad-output
This free online tool let's you compute a HMAC using your desired algorithm, for example MD5 or SHA-256 and many others
I have smee-client running locally and see that web-hooks are being triggered back to my bot locally, however, all requests are throwing 400's.
I verified the secret in the .env matches the app secret, but still no luck. Where can I get the correct header information to get this request to go through?