Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Verify Webhooks coming from Jira.

Hello, 

We are building a Webhook in Jira that sends data to a Google Cloud Function. However, GCF will only accept OAuth2.0 as the authentication and Jira doesn't have the ability to generate/refresh the token so using a Bearer Token is not an option and we are forced to have the GCF to allow un-authenticated request which is not a good idea.
Other system like Hubspot (https://developers.hubspot.com/docs/api/webhooks/validating-requests) and Shopify (https://shopify.dev/tutorials/manage-webhooks#verify-webhook) has this feature where the webhook request includes a digital signature which is generated by signing the body using a client secret and can be validate in GCF. This will ensure that the request is legit. Now, I've been looking for documents, but, couldn't find if Atlassian/Jira has this same feature.

Thanks in Advance.


Patrick

1 answer

0 votes

Hello @Patrick Alcomendas ,

Welcome to the Atlassian Community!

Webhooks authentication is only supported when building apps/add-ons, for details see: 

 

For the rest, when configuring a webhook via the Jira UI, the headers aren't actually configurable and therefore the requests cannot be sent with an authentication header. For your reference, we have this (rather old) suggestion ticket:

 

As a possible workaround, I'd suggest to create an Automation Rule (global or project specific) and use the Send outgoing web request automation action to send your webhooks when the desired conditions are matched, since this way you can configure the request headers.  

 

For more details please see: 

 

I hope this helps.

 

Cheers,
Dario

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
FREE
PERMISSIONS LEVEL
Site Admin
TAGS
Community showcase
Published in Jira Service Management

Why upgrade to Jira Service Management Premium?

We often have questions from folks using Jira Service Management about the benefits to using Premium. Check out this video to learn how you can unlock even more value in our Premium plan.  &nb...

148 views 0 4
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you