Bibliothek / Sicherheit & Compliance
Sicherheit & Compliance
Öffentlichen Webhook mit Authentifizierung und Validierung absichern
Wenn eine Anfrage den Webhook erreicht, prüft es den Authorization-Header und die Pflichtfelder und antwortet entsprechend mit 200, 400 oder 401.
Was sie bewirkt
## 🔐 Secure Webhook – Summary *This workflow protects a public webhook with authentication and payload validation.* --- #### 🧩 Why use it? - ✅ Ensure only trusted clients can call your workflow (via Bearer token). - ✅ Validate that all expected fields are present in the request body. - ✅ Return helpful and consistent JSON responses (200, 400, 401). --- #### ⚙️ How it works: 1. Webhook – Entry point for external POST requests. 2. Configuration – Defines config.bearerToken and config.requiredFields. 3. Check Authorization Header – Compares incoming Bearer token with config. 4. 401 Unauthorized – Returned if the token is missing or incorrect. 5. Has required fields? – JS code checks for required fields in the request body. 6. 400 Bad Request – Returned if any required field is missing. 7. Create Response & 200 OK – Returns a custom success message. --- #### 🛠 Setup Instructions: - Set your desired Bearer token in config.bearerToken. - For each required field, set a key in config.requiredFields *(e.g., config.requiredFields.message)*. *👉 The value doesn't matter, only the keys are checked.* - Replace the Add workflow nodes here node with your own workflow logic. - Edit the Create Response node to build your response. --- 📌 *Great for building secure, reusable webhook endpoints for APIs, forms, or 3rd-party services.*
Die Schritte
- Check Authorization Header
- 401 Unauthorized
- 200 OK
- Configuration
- Webhook
- Has required fields?
- Check Valid Request
- 400 Bad Request
- Create Response
- Add workflow nodes here
- Error Handler
- Stopanderror 1
- Stopanderror 2
- Stopanderror 3
Insgesamt 31 Schritte.
Ähnliche Automatisierungen
Sicherheit & ComplianceEingehende Webhook-Payloads entschlüsseln und parsen39 SchritteSicherheit & ComplianceEinen Webhook mit Authentifizierung und Payload-Prüfungen absichern10 SchritteSicherheit & ComplianceMaskierte E-Mail-Adressen über einen Webhook erstellen43 SchritteSicherheit & ComplianceSlack-Webhook-Signaturen verifizieren7 Schritte