Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
Community Members
Community Events
Community Groups

Custom bitbucket webhook secret handling

Hi, I am working with receiving updates from BB on Comments (Added, edited, deleted) and PR Actions (Declined, deleted). 

I am trying to implement a secret on the webhook, however, am inexperienced with doing any sort of cryptography. My understanding is that I need to take the message body and encrypt it using HMACSha256 with the secret as the key and that should equal the value in the "X-Hub-Signature" header. (here) However, when I try this I do not end up with the same values. What is the format that we are expected to use for the body when encrypting it?


I am having a hard time discerning if my trouble is being caused by my incompetence in encrypting it or my incompetence in formatting the body correctly.


I am currently trying to use the value directly given from the request on BB on a single line, with no newlines. 


Does anyone have any experience with this that can point me in the right direction?

0 answers

Suggest an answer

Log in or Sign up to answer
Community showcase
Published in Bitbucket

Git push size limits are coming to Bitbucket Cloud starting April 4th, 2022

Beginning on April 4th, we will be implementing push limits. This means that your push cannot be completed if it is over 3.5 GB. If you do attempt to complete a push that is over 3.5 GB, it will fail...

2,097 views 2 9
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you