Learn the fundamentals of Infisical webhooks.
Project Settings > Webhooks
.
When creating a webhook, you can specify an environment and folder path (using glob patterns) to trigger only specific integrations.
x-infisical-signature
to the request with a payload.
The header will be in the format t=<timestamp>;<signature>
. You can then generate the signature yourself by generating a SHA256 hash of the payload with the secret key that you know.
If the signature in the header matches the signature that you generated, then you can be sure that the request was sent by Infisical and is intended for your integration. The timestamp in the header ensures that the request is not replayed.