...
To ensure the authenticity of webhook requests, verify the signature included in the moniepoint-webhook-signature
header.
Verification Process
Concatenate Use this link to verify signature
Add plain text in this format
moniepoint-webhook-id
, __moniepoint-webhook-timestamp
(you can get it from headers), and the request body using '"__"' as a delimiter.Generate an HMAC-SHA256 hash using your webhook secret__payload
Add webhook secret in secret key field
Compare the generated signature with the
moniepoint-webhook-signature
header to ensure integrity.
Note: moniepoint-webhook-id
and moniepoint-webhook-timestamp ,
is in notification header
Sample Notification Received:
...