🎓 This is a free lesson from my Bubble course 👉 https://thinkitbuildit.co

IN THIS VIDEO
You'll learn about the issues with unsecured webhooks and how to protect your own webhook endpoints in Bubble using Hookdeck.

This is a workaround of the limitation that Bubble has where they format the raw request body of any incoming requests to your app, a raw body that you need to be undisturbed in order to use it in your verification process (via a SHA256 hashing function).

If you haven't already, be sure to watch my introductory video on webhooks first -    • How Webhooks work in Bubble  

⌚ TABLE OF CONTENTS
00:00 Webhook vulnerability
05:56 Swagger documentation
08:51 Protection with conditions
12:40 Signature verification
22:18 The problem with signature verification in Bubble
24:05 Setting up Hookdeck / Stripe integration
29:23 Verifying the Stripe webhook
34:01 Setting up Hookdeck / Bubble integration
35:44 Verifying the Hookdeck request
47:46 Live mode setup

🔗 LINKS
https://hookdeck.com/