Webhook authentication ensures that the data delivered originates from Qualifio.
Webhooks require that your notification URL is accessible to Qualifio’s systems. However, we realise that you might not want this URL publicly accessible, for security reasons.
This is why you can choose to authenticate the notifications using the webhook header, in which case you should enter the name (key) and value.
These credentials will be sent together with the webhook notification, allowing you to verify that incoming requests originate from Qualifio.
Once you’ve decided to add authentication to your webhook, you can follow one of our configuration examples:
Note: Each header line must specify the header name, followed by a colon (:), followed by the header value. The header name and the header value can be specified in Qualifio. Those will be automatically joined by a colon. The colon is always present – you don't need to write it down.
Bearer authentication
Authorization: Bearer <token>
Basic authentication
Authorization: Basic <token>
Other examples
- X-Authorization: ...
X-Authorization: <token>
- X-Api-Token: ...
X-Api-Token: <token>
- X-Auth-Token: ...
X-Auth-Token: <token>
Use something we don’t have on this list? Let us know, and we’ll try and point you in the right direction.