Show HN: Correct Hooks – Easy webhook auth with asymmetric signatureshttps://github.com/handlewithcarecollective/correct-hooks
A while back, I needed to make a webhook system for a project I was working on. I pretty quickly found out that webhook auth is not an entirely solved problem with people frequently implementing DIY solutions. I also found out that while using some form of asymmetric signature (eg. oauth tokens) is common with regular api auth, most webhook producers use symmetric signatures (HMAC) instead. This bugged the hell out of me because the webhook functionality I needed was pretty basic, but using symmetric signatures, which requires the webhook producer to hold onto a secret for every endpoint they…