From Dev.to
How to verify HMAC-SHA256 signed webhooks in Node and Python
If your app exposes an endpoint that another service calls (a webhook, a scheduled job URL, a callback), anyone who discovers the URL can call it too. Signed requests fix that. The sender computes an...