Oct 16
Add signed header in webhook requests
Add a signed header to verify that incoming requests accepted by the webhook do actually com from Tally
Completed
Nov 7, 2023
This is a needed feature. If you need to secure your webhook in the meantime, try to add a secret token to your wehbook query parameter. Example : https://example.com/webhook?authkey=some-sectet-token You can verify the token in your service to make sure it is from trusted source. A Signed Header is a better option. until it is implemented, everyone can use this.
Sorry for the late update. This is now available: https://tally.so/help/webhooks