We are building a Webhook in Jira that sends data to a Google Cloud Function. However, GCF will only accept OAuth2.0 as the authentication and Jira doesn't have the ability to generate/refresh the token so using a Bearer Token is not an option and we are forced to have the GCF to allow un-authenticated request which is not a good idea.
Other system like Hubspot (https://developers.hubspot.com/docs/api/webhooks/validating-requests) and Shopify (https://shopify.dev/tutorials/manage-webhooks#verify-webhook) has this feature where the webhook request includes a digital signature which is generated by signing the body using a client secret and can be validate in GCF. This will ensure that the request is legit. Now, I've been looking for documents, but, couldn't find if Atlassian/Jira has this same feature.
Thanks in Advance.
Hello @Patrick Alcomendas ,
Welcome to the Atlassian Community!
Webhooks authentication is only supported when building apps/add-ons, for details see:
For the rest, when configuring a webhook via the Jira UI, the headers aren't actually configurable and therefore the requests cannot be sent with an authentication header. For your reference, we have this (rather old) suggestion ticket:
As a possible workaround, I'd suggest to create an Automation Rule (global or project specific) and use the Send outgoing web request automation action to send your webhooks when the desired conditions are matched, since this way you can configure the request headers.
For more details please see:
I hope this helps.
We often have questions from folks using Jira Service Management about the benefits to using Premium. Check out this video to learn how you can unlock even more value in our Premium plan. &nb...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events