Name: Webhook Signature add-on for Gravity Forms
Availability: InStock
Author: danielboven

Add a signature HTTP header to webhook requests to prevent man-in-the-middle and replay attacks.

Webhook Signature add-on for Gravity Forms

<p>This plugin can sign the webhook events sent by the Gravity Forms WebHooks Add-On to your endpoints by including a signature in each event’s <code>X-Gform-Signature</code> header. This allows you to verify that the events were sent by the Gravity Forms add-on, not by a third party. As of right now, you must verify the signatures by manually using your own solution. However, an example of a Node.js (JavaScript) implementation is linked below.</p>
<p>Before you can verify signatures, you need to retrieve your endpoint’s public key (more information at <a href="#how%20can%20i%20verify%20the%20signature%3F" rel="nofollow ugc">this question</a>).</p>
<p>This plugin uses the same keys for every form and endpoint, meaning that the same keys will be used for every signature generated.</p>
<h3>Verification implementations</h3>
<ul>
<li><strong>Node.js:</strong> See the example on <a href="https://github.com/danielboven/gravity-forms-webhook-signature/blob/main/examples/NODE_JS.md" rel="nofollow ugc">Github</a>.</li>
</ul>


Alternative Plugins for

Discover the Lists with Webhook Signature add-on for Gravity Forms