hard20 pts · first answer countsapi-testingwebhooksapi-security

Testing webhook signatures

A payment provider signs each webhook with an HMAC of the body in a header. Which test matters most for your receiving endpoint?

A.A body changed after signing is rejectedB.A valid webhook returns 200 within 10 sC.The endpoint accepts webhooks over HTTPD.The endpoint logs the full card number

Discussion 0

Join free to post in the discussion.

Testing webhook signatures

Discussion 0

Related questions