-
Type:
Suggestion
-
Resolution: Unresolved
-
None
-
Component/s: Webhooks
-
None
-
1
-
2
While creating a webhook using a secret token, users may Test the connection to the endpoint first using the Test Connection UI Button.
When this test connection payload is sent, Bitbucket does not include the x-hub-signature header. This header is sent only in case of real events. Sometimes, at the endpoint, the test connection request is not accepted without the authentication and for security reasons, the endpoint might always require the header.
To resolve this, Bitbucket should provide for the "x-hub-signature" header to be sent even in the event of Test connection.