Can Jira invoke a webhook with some form of authentication?

[Ronn Brashear]

Greetings,

It doesn't appear that Jira will invoke webhooks with any authentication. I don't see any options to add API keys or other auths.

Do I have this right?

Thanks,

Ronn B

[Steven F Behnke · Accepted solution]

That is correct. We use 'man in the middle' to achieve this. The webhook notifies a service, the service ensure the webhook came from jira, then forwards appropriate information along to the destination service.

[Ronn Brashear]

Yeah, I have the WAF verifying it's coming from Atlassian Jira, then the service checks for well-formed, but not much more than that seems possible.

The only alternative I see is to write a full-blown Connector App which does offer key-based auth.