Anyone here used NEXTJS 13? How do you allow webhook

Question

Anyone here used NEXTJS 13? How do you allow webhook

events to come from certain IPs? I have list of 5 IPs. Can I just check for x-real-ip request header and if it includes then execute code otherwise throw error. Would this work or can it be improved?

0

30.03.2024

5 ответов

33 просмотра

Adi Автор вопроса

Thomas
That sounds unsafe, what if I just set x-real-ip t...

You mean to say it can be easily manipulated right? What would you suggest then?

0

7 месяцев назад

dog Ass

usually webhooks are supposed to contain a checksum which can be verified

0

7 месяцев назад

Adi Автор вопроса

dog Ass
usually webhooks are supposed to contain a checksu...

Yes I have done that. Verifying signature instead of verifying IPs

0

7 месяцев назад

dog Ass

Adi
Yes I have done that. Verifying signature instead ...

That should be enough

0

7 месяцев назад

Thomas · Accepted Answer

Thomas

That sounds unsafe, what if I just set x-real-ip to one of your whitelisted IP's and make a request

0

7 месяцев назад

Похожие чаты

Anyone here used NEXTJS 13? How do you allow webhook

5 ответов

Похожие вопросы