Event Grid - HMAC request signing

Neilson Ma 6

I'm trying to implement a webhooks system for my application using Event Grid webhooks. In order to secure the payload, many examples online have pointed towards request signing using HMAC and I was wondering if this would be possible using Event Grid. I'm using the Event Grid publisher client SDK to publish events but I'm unable to find anywhere where I can send headers for the calculated signature.

1 answer

JananiRamesh-MSFT 29,201 Reputation points

2022-08-30T17:42:34.337+00:00

Hi @Neilson Ma Thanks for reaching out. No, we don't have support setting the custom headers during while publishing, however you can define custom headers (with static or dynamic values from payload) on event subscription and Event Grid sets those headers during delivery.

let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.
Please sign in to rate this answer.

1 person found this answer helpful.
Neilson Ma 6 Reputation points

2022-09-04T22:30:36.067+00:00

Thanks for your response @JananiRamesh-MSFT . Custom delivery headers don't really help because as you said, they're either static values, or dynamic values from the payload, and for request signing we need to hash the payload so we can't put the signature in there.

JananiRamesh-MSFT 29,201 Reputation points

2022-09-06T03:20:46.137+00:00

Hi @Neilson Ma Thanks for getting back, as mentioned before we don't have support setting the custom headers while publishing you can leave your feedback at https://feedback.azure.com/d365community/forum/a095b5b5-f124-ec11-b6e6-000d3a4f0da0 so that other users who are in need to similar feature can upvote it and PG can take it forward.

Let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Event Grid - HMAC request signing

1 answer

Your answer