webhooks
Verify webhook signatures before you trust a goal
Your webhook URL is public. Without a signature check, anyone who learns the URL posts fake goals into your app. Six lines of code stop them.
GOAL API
1 min read
Topic
security
1 article on this topic.