3.0 Security

As any Webhooks call out to your own services, you could subscribe to these and just listen to all the incoming requests without authentication, however it is advised that you use one of our authentication methods in order to make sure that you know that the information you receive on your endpoint is definately from StaffCircle and not a potentially malicious third party.

We currently offer two forms of security, with future plans to support OAuth / OIDC.

These are detailed in the following sections.

3.1 API Key

3.2 HMAC Authentication