Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Wrong HMAC sent to webhook

Ievgen_Litvinov
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
July 31, 2024

I was trying to add a webhook with HMAC verification using node.js.

Signature received in x-hub-signature header always differs from calculated in webhook.

I've also verified signature in online HMAC generators like 

https://www.freeformatter.com/hmac-generator.html or 

https://www.devglan.com/online-tools/hmac-sha256-online

All of them returns same digest as I have in webhook, however different than bitbucket sends in headers.

Webhook calculates digest from raw body payload (string, utf8) using secret generated for webhook.

What can be wrong there?

0 answers

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS
AUG Leaders

Atlassian Community Events