How does my application know that a webhook really comes from Enquete.com?
Every webhook has its own secret, and each request carries a signature that your application verifies with that secret. Treat the secret like a password: keep it on the server, for example in an environment variable or a secret manager, and never in frontend code, public repositories or shared documents.
Was this guide helpful?
Thanks for letting us know.
Sorry about that. Tell us what was missing and we’ll improve this guide.
Contact support