Circleci Webhook Secret token decryption or validation

fmc100 · August 16, 2021, 5:00pm

There is nothing in the docs about how I would validate the secret token from a circleci webhook.

Currently, when you enter one it adds a header to the request Circleci-Signature v1=*********.

I have no idea how to validate that this is from circleci nor how to decode it and I didn’t see anything in the docs describing it either.

Any help would be greatly appreciated, thanks.

aaronclark · August 20, 2021, 2:49am

Hi @fmc100 ,

Currently only the “v1” signature will be provided, and it is computed by
running HMAC-SHA256 on the request body, using the configured signing secret as
the secret key. We are working on updating the documentation, but here is a sample that shows how to decode/verify the signature:

github.com

CircleCI-Public/webhooks-consumer-sample/blob/main/server.js

require("dotenv").config();
const express = require("express");
const path = require("path");
const app = express();
const cors = require('cors');
const axios = require("axios");
const Pusher = require('pusher')
const crypto = require("crypto")

app.use(cors());

app.use(express.urlencoded({ extended: false }));
app.use(express.json());

let port = process.env.PORT || "5000";

const pusher = new Pusher({
    appId: "1209282",
    key: "3ad5dab74e212a6a3009",
    secret: "59d30430ab61f90f42ad",

This file has been truncated. show original

If you have any additional questions please feel free to let me know!

Best Regards

Topic		Replies	Views
Cannot parse the payload received from a CircleCI web hook Feedback & Bug Reports 2.0	16	2823	September 25, 2018
Get Webhook API broken API webhooks	5	685	June 13, 2023
CircleCI User Key uses RSA with SHA1, which GitHub has deprecated Feedback & Bug Reports suggested	5	2437	January 11, 2022
CircleCI API doesn't work as documented Feedback & Bug Reports api , auth	1	784	January 8, 2023
Webhook authentication Build Environment circle-yml	5	1117	October 22, 2020

Circleci Webhook Secret token decryption or validation

Related topics