# FAQ: Which data should I encode when building a webhook listener (HMAC authentication)?

**URL:** https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197
**Category:** Integrator.io
**Tags:** authentication, security, listener, webhook
**Created:** [March 13, 2021, 12:23am UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197 "2021-03-13T00:23:36Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![katelarson](https://avatars.discourse-cdn.com/v4/letter/k/91b2a8/32.png) [@katelarson](https://connective.celigo.com/u/katelarson)
#### Post date: [March 13, 2021, 12:23am UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/1 "2021-03-13T00:23:36Z")

</div>

**Q.** I'm building a webhook listener using HMAC authentication and I’m unsure which data to encode. I see options to choose the algorithm and to set a key, but not for the value itself. Is it the URL, the request body, or something else?  
**A.** To get a signature, encode the _request body_ using the specified algorithm and secret.  
  
Check out this related article in our Help Center: [Create webhook listeners](https://docs.celigo.com/hc/en-us/articles/360015827372).

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 10:14am UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/2 "2024-03-13T10:14:28Z")

</div>

can you give clear step by step procedure of screenshots i tried this article but im not getting the result as 401

[https://connective.celigo.com/t/construct-an-hmac-request-via-postman-to-send-test-requests-to-celigo-webhooks/1119](https://connective.celigo.com/t/construct-an-hmac-request-via-postman-to-send-test-requests-to-celigo-webhooks/1119)

---

<div class="post-metadata">

### Author: ![ommishra](https://avatars.discourse-cdn.com/v4/letter/o/f08c70/32.png) [@ommishra](https://connective.celigo.com/u/ommishra)
#### Post date: [March 13, 2024, 11:45am UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/3 "2024-03-13T11:45:27Z")

</div>

Hi Kumar,  
  
We would like to understand how you encountered the error and what actions you took that led to this error.  
  
Thanks,  
Om Mishra

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 11:47am UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/4 "2024-03-13T11:47:54Z")

</div>

actually im trying HMAC authentication webhook for one of my clients

i tried as the same procedure as in the link i posted

but im getting 401 error if any possibilities please help

---

<div class="post-metadata">

### Author: ![ommishra](https://avatars.discourse-cdn.com/v4/letter/o/f08c70/32.png) [@ommishra](https://connective.celigo.com/u/ommishra)
#### Post date: [March 13, 2024, 3:16pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/5 "2024-03-13T15:16:19Z")

</div>

Hi Kumar,

I just tried and it's working for me. Below are the steps I used to make it work.  
  
1. I created a webhook listener in IO and provided the necessary details. For the Key (secret) value, I used: "secret".

 ![5301043caa20740200000001-b0ece46cd3204abf8e633744554e4f8c.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/8/827b2e6bda4f2fd59fa152f984213590d1fd4d8f.png)

2. I entered the POST public URL in Postman and used the script mentioned in the earlier [post](https://connective.celigo.com/t/construct-an-hmac-request-via-postman-to-send-test-requests-to-celigo-webhooks/1119).

 ![5301043caa20740200000001-834653c39726440e873b28f7ff616fbc.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/e/e1703bf7e489955441ed34b61668bb4f094dc72a.png)

3. In the above screenshot, I defined the HMAC variable using the same script I'm using in the Pre-request Script, as shown in the screenshot below.

 ![5301043caa20740200000001-d403a1a90bcb4ffba291ebebba43fdce.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/1/106126f32543141dcb1598763902481ee4b60768.png)

4. I received a 204 response code and was able to see the data in IO.

 ![5301043caa20740200000001-da2421a9ad2e4fb5a91cef139d51d892.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/5/551c00f553359b1b8aaf1b68a9fb099f8b38671e.png)

 ![5301043caa20740200000001-f255d9670a9f4bbaa5ae58c73618f158.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/c/c85d0d10b4dcc630578f2ff09ce1df67e9ffc7e2.png)

Hope this helps.  
  
Thanks,  
Om Mishra

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 3:36pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/6 "2024-03-13T15:36:48Z")

</div>

thanks @ommishra & @kathyanaqueeman it is working fine through post man

one more last doubt how we will set this through celigo https like what we did in postman

---

<div class="post-metadata">

### Author: ![kathyanaqueeman](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/kathyanaqueeman/32/9122_2.png) [@kathyanaqueeman](https://connective.celigo.com/u/kathyanaqueeman)
#### Post date: [March 13, 2024, 4:06pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/7 "2024-03-13T16:06:58Z")

</div>

Hi @kumarmouthiktumuluri,

Do you mean how to set this up through the integrator.io interface rather than through Postman? We have some instructions here: [Set up a webhook listener](https://docs.celigo.com/hc/en-us/articles/360015827372-Create-webhook-listeners#HMAC). There's a section specifically on HMAC.

---

<div class="post-metadata">

### Author: ![ommishra](https://avatars.discourse-cdn.com/v4/letter/o/f08c70/32.png) [@ommishra](https://connective.celigo.com/u/ommishra)
#### Post date: [March 13, 2024, 4:08pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/8 "2024-03-13T16:08:19Z")

</div>

Hi Kumar,  
  
For testing, I have used "secret" as the secret value, which should also be entered in the Pre-request Script in Postman. This is the same value you will use when configuring your webhook in IO.

 ![5301043caa20740200000001-f8a4fa7bab36417daedb22913ef7d729.png](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/a/a6eb417983bf689958aa15e35756df92bb9e7b9b.png)

Thanks,  
Om Mishra

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 4:11pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/9 "2024-03-13T16:11:49Z")

</div>

How we will do that same thing in celigo platform through http

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 4:12pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/10 "2024-03-13T16:12:59Z")

</div>

Thanks for @ommishra for clarifying the doubt in postman

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 4:13pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/11 "2024-03-13T16:13:28Z")

</div>

How can we achieve the same thing in celigo platform through http @ommishra

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 4:17pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/12 "2024-03-13T16:17:59Z")

</div>

@kathyanaqueeman ya webhook listener is done working fine with the help of @ommishra

but how do i set up http so i invoke webhook it from another flow

---

<div class="post-metadata">

### Author: ![kathyanaqueeman](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/kathyanaqueeman/32/9122_2.png) [@kathyanaqueeman](https://connective.celigo.com/u/kathyanaqueeman)
#### Post date: [March 13, 2024, 4:25pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/13 "2024-03-13T16:25:30Z")

</div>

@kumarmouthiktumuluri,

Do you want to invoke a webhook from another flow in integrator.io? I'm not sure about that. Webhooks send an HTTP POST message over the web in real-time to an endpoint when an event occurs in an application. When an event triggers a webhook request, the source application sends a message to a specified URL, and a webhook listener receives the message and then executes operations according to the message's content.

If you mean that you want an "event" (like a flow ending) in IO to trigger a webhook flow, that might be possible, but I'm not sure. Perhaps @ommishra can help. I know you [can daisy chain flows in integrator.io](https://docs.celigo.com/hc/en-us/articles/5926335821211-Daisy-chain-flows), but I'm not sure how much help that will be.

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 4:31pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/14 "2024-03-13T16:31:34Z")

</div>

Yes like you used pre requisite script right

what type of settings need to be done in celigo Http in another flow to invoke the webhook

@ommishra @kathyanaqueeman

---

<div class="post-metadata">

### Author: ![kathyanaqueeman](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/kathyanaqueeman/32/9122_2.png) [@kathyanaqueeman](https://connective.celigo.com/u/kathyanaqueeman)
#### Post date: [March 13, 2024, 5:09pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/15 "2024-03-13T17:09:26Z")

</div>

Hi @kumarmouthiktumuluri,

Let me check on this and get back to you. I'll reach out when I have something concrete to share. Thanks!

---

<div class="post-metadata">

### Author: ![kathyanaqueeman](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/kathyanaqueeman/32/9122_2.png) [@kathyanaqueeman](https://connective.celigo.com/u/kathyanaqueeman)
#### Post date: [March 13, 2024, 5:20pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/16 "2024-03-13T17:20:22Z")

</div>

Hi @kumarmouthiktumuluri,

Here's [a community article example that achieves what you're looking for](https://connective.celigo.com/t/how-to-pass-data-from-one-flow-to-another/313). Thanks!

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 5:36pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/17 "2024-03-13T17:36:53Z")

</div>

i want http that calls hmac anyways i know that one

---

<div class="post-metadata">

### Author: ![kathyanaqueeman](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/kathyanaqueeman/32/9122_2.png) [@kathyanaqueeman](https://connective.celigo.com/u/kathyanaqueeman)
#### Post date: [March 13, 2024, 7:16pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/18 "2024-03-13T19:16:06Z")

</div>

@kumarmouthiktumuluri,

Does this solve your problem or are you looking for something else?

Thanks!

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 7:30pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/19 "2024-03-13T19:30:39Z")

</div>

i want like how can we do the configuration of that hmac webhook settings in a http connector for invoking the hmac webhook connector , you showed the example of invoking through postman, i m researching for invoking hmac webhook through celigo connector for anypossibility

---

<div class="post-metadata">

### Author: ![kumarmouthiktumuluri](https://avatars.discourse-cdn.com/v4/letter/k/ba8739/32.png) [@kumarmouthiktumuluri](https://connective.celigo.com/u/kumarmouthiktumuluri)
#### Post date: [March 13, 2024, 7:34pm UTC](https://connective.celigo.com/t/faq-which-data-should-i-encode-when-building-a-webhook-listener-hmac-authentication/1197/20 "2024-03-13T19:34:41Z")

</div>

take your time no issues and post it here
