Anyone here used NEXTJS 13? How do you allow webhook

Question

Anyone here used NEXTJS 13? How do you allow webhook

events to come from certain IPs? I have list of 5 IPs. Can I just check for x-real-ip request header and if it includes then execute code otherwise throw error. Would this work or can it be improved?

0

30.03.2024

5 ответов

50 просмотров

Adi Автор вопроса

Thomas
That sounds unsafe, what if I just set x-real-ip t...

You mean to say it can be easily manipulated right? What would you suggest then?

0

30.03.2024

dog Ass

usually webhooks are supposed to contain a checksum which can be verified

0

31.03.2024

Adi Автор вопроса

dog Ass
usually webhooks are supposed to contain a checksu...

Yes I have done that. Verifying signature instead of verifying IPs

0

31.03.2024

dog Ass

Adi
Yes I have done that. Verifying signature instead ...

That should be enough

0

31.03.2024

Thomas · Accepted Answer

Thomas

That sounds unsafe, what if I just set x-real-ip to one of your whitelisted IP's and make a request

0

30.03.2024

Похожие чаты

Anyone here used NEXTJS 13? How do you allow webhook

5 ответов

Похожие вопросы