Security
When using webhooks, hold to these best practices to increase security and performance.
Use HTTPS and SSL verification
Make sure the server you're using has an HTTPS connection. When delivering webhooks, Unify will automatically check SSL certificates. We advise you to keep SSL verification turned on.
Validating webhook payloads
Each webhook payload will have a cryptographic hash included by Unify with the provided secret token. This hash, included in X-Unify-Hmac-Sha256 request header, should be used to verify the payload that was received from Unify before your private system takes any further action.
IP Whitelisting
If you have a firewall or security group in place, you can whitelist Unify's IP addresses to ensure that only requests from Unify are accepted. This adds an additional layer of security to your webhook endpoint.
You can find the list of Unify's IP addresses :
185.69.3.21for production environment185.69.3.22for staging / playground environment
Make sure to keep this list up to date, as IP addresses may change over time.
Updated 9 months ago