Event Grid - HMAC request signing

Question

Event Grid - HMAC request signing

Neilson Ma 1

I'm trying to implement a webhooks system for my application using Event Grid webhooks. In order to secure the payload, many examples online have pointed towards request signing using HMAC and I was wondering if this would be possible using Event Grid. I'm using the Event Grid publisher client SDK to publish events but I'm unable to find anywhere where I can send headers for the calculated signature.

Answer 1

JananiRamesh-MSFT 9,391

Hi @Neilson Ma Thanks for reaching out. No, we don't have support setting the custom headers during while publishing, however you can define custom headers (with static or dynamic values from payload) on event subscription and Event Grid sets those headers during delivery.

let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Neilson Ma 1 Reputation point

2022-09-04T22:30:36.067+00:00

Thanks for your response @JananiRamesh-MSFT . Custom delivery headers don't really help because as you said, they're either static values, or dynamic values from the payload, and for request signing we need to hash the payload so we can't put the signature in there.
JananiRamesh-MSFT 9,391 Reputation points

2022-09-06T03:20:46.137+00:00

Hi @Neilson Ma Thanks for getting back, as mentioned before we don't have support setting the custom headers while publishing you can leave your feedback at https://feedback.azure.com/d365community/forum/a095b5b5-f124-ec11-b6e6-000d3a4f0da0 so that other users who are in need to similar feature can upvote it and PG can take it forward.

Let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Event Grid - HMAC request signing

1 answer

Activity