member badge
Jurriaan Persyn
For security-sensitive integrations, it would be valuable to allow custom HMAC signing options for webhooks.
Specifically:
  • Choose which headers carry the signature and timestamp.
  • Add prefixes or postfixes to header values.
  • Select whether the signature is calculated over the request body or the request path.
This would give teams more flexibility to integrate with systems that have strict or unique webhook requirements.