Validating a Webhook Notification

OttoFMS
1

I’m looking to see if I can use OttoFMS webhooks with QuickBooks Online webhooks. The QBO webhooks have an additional requirement to validate the webhook notification using verifier tokens.

I’m not sure if this will be possible to do with OttoFMS and if so how to go about this?

2

Hi :slight_smile:

I don’t think you HAVE to do this. It’s a recommendation

But I think you could do it with FileMaker’s crypto functions.

Basically when the FileMaker script receives the payload, you need to hash it using the verifier token. Then you compare that hash against the one intuit sends along in the header which OttoFMS passes along to you in the payload.

If they don’t match throw out the payload. It didn’t come from intuit.

But this is all something you do in FileMaker after OttoFMS has handed it off to Filemaker

Does that help?

Thanks

Todd

3

Thanks Todd,

That’s great - will explore that further but all makes perfect sense.

regards,
Steve