Implementing Signature Verification for Webhooks (GitHub HMAC verification)

In this video, you will learn how to implement signature verification for webhooks as we use GitHub webhooks to demonstrate how to achieve this.

0:00 - Introduction
0:57 - The demo project
1:37 - The unrestricted webhook URL vulnerability
3:18 - Setting up a GitHub webhook with a secret key
4:21 - Implementing signature verification on the webhook endpoint
7:38 - Testing the HMAC verification with an unauthorized client
9:48 - Testing the HMAC verification with a GitHub webhook

Видео Implementing Signature Verification for Webhooks (GitHub HMAC verification) канала Hookdeck