How to set secret to secure webhooks using cloud_id/v3/rest api?

[Atif Dastgir]

I've connected JIRA in my web app using oauth (have access/refresh tokens) - I'm registering webhooks programatically using this format:

{

  "name": "Test",

  "url": "https://xyz.com/webhooks/jira",

  "webhooks": [

    {

      "jqlFilter": "project = TESTPROJECT",

      "events": ["jira:issue_created", "jira:issue_updated"]

    }

  ],

  "excludeBody": false,

  "secret": "abc"

}

I followed this link to write register logic (https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-webhooks/#api-rest-api-3-webhook-post). The webhook registers and I get events without any signature.

I'm not getting any header signature when I receive event. Kindly guide how to achieve this?

Thanks