Hello, we are using webhooks to receive responses from forms to our application. We’re validating requests to the webhook endpoint using HMAC as recommended here: https://developer.typeform.com/webhooks/secure-your-webhooks/
However, our server does not actually receive the `typeform-signature` header giving us nothing to check against. Below is an example list of headers we receive. Does the `typeform-signature` header need to somehow be enabled?
'user-agent': 'Typeform Webhooks',
'content-length': '621',
'accept-encoding': 'gzip',
'cache-control': 'max-age=259200',
'content-type': 'application/json',
via: '1.1 squid-7d6c9d5675-vxb6w (squid/5.2)',
'x-forwarded-for': '18.210.136.162',
'x-forwarded-proto': 'http'
Best answer by jackfischer11
View original
