Introducing enhanced webhook security
Oct 25, 2023Edmund Munday
Summary
Introduced webhook secrets for Bitbucket Cloud, enabling HMAC signature verification of webhook payloads using SHA256 and a user-defined secret token. This enhances security by ensuring payload authenticity and protecting against unauthorized access. Provided example code in Java and Python for signature verification and detailed the process of adding secrets to webhooks.
More from the Atlassian Webhook Delivery Platform trail
- The Events Rail: Inside Atlassian's Webhook Delivery Platform
- Scaling StreamHub: Transitioning from Kinesis to Kafka for 145 Billion Daily Events
- Building a Multi Region Compliant Customer Data Lake at Scale
- Lithium: distributed, ephemeral streaming pipelines
- Why we chose Kafka for the Trello socket architecture