Тёмный

Webhook Security in Bubble 

Matt Neary
Подписаться 19 тыс.
Просмотров 2,2 тыс.
50% 1

🎓 This is a free lesson from my Bubble course 👉 thinkitbuildit.co
IN THIS VIDEO
You'll learn about the issues with unsecured webhooks and how to protect your own webhook endpoints in Bubble using Hookdeck.
This is a workaround of the limitation that Bubble has where they format the raw request body of any incoming requests to your app, a raw body that you need to be undisturbed in order to use it in your verification process (via a SHA256 hashing function).
If you haven't already, be sure to watch my introductory video on webhooks first - • How Webhooks work in B...
⌚ TABLE OF CONTENTS
00:00 Webhook vulnerability
05:56 Swagger documentation
08:51 Protection with conditions
12:40 Signature verification
22:18 The problem with signature verification in Bubble
24:05 Setting up Hookdeck / Stripe integration
29:23 Verifying the Stripe webhook
34:01 Setting up Hookdeck / Bubble integration
35:44 Verifying the Hookdeck request
47:46 Live mode setup
🔗 LINKS
hookdeck.com/

Опубликовано:

 

27 июл 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 14   
@lotfinagi2025
@lotfinagi2025 7 месяцев назад
Thanks Matt, I've purchased already the Canva template and proceeding with the bootcamp, but cannot say how much I've appreciated such RU-vid videos, truly valuable. Thanks a lot!
@chrisstudio7619
@chrisstudio7619 10 месяцев назад
Thank is so helpful , thanks Matt
@charleslcts
@charleslcts 11 месяцев назад
Hey Matt, nice video! Thanks! One comment: using "first item is not empty" is more WU and speed efficient than "count is 1"
@DanFarfan
@DanFarfan 11 месяцев назад
Other than that, Mrs. Lincoln.... this video is amazing! TY for layout the hookdeck bubble horror show.
@NickNomadHipHopNorris
@NickNomadHipHopNorris 6 месяцев назад
My wife was in the next room and thought I was watching a video about peyronie's disease 🤣 I was like "He's saying 'Hook DEHck', ya perv!" In all seriousness, this video was insanely helpful.
@mneary
@mneary 6 месяцев назад
Hahaha
@TrelisResearch
@TrelisResearch 8 месяцев назад
Great vid. I think right now it's even easier in hookdeck to just pick Stripe auth and then add bearer token auth for the destination. Your explanations are great though
@user-nb1wf8tp5b
@user-nb1wf8tp5b Год назад
I heard so many good things about you as a Bubble instructor. Now what is the difference between "Think it, build it" course and the "Air Dev No-code Bootcamp" ?
@SergeBrocteur
@SergeBrocteur 7 месяцев назад
Hookdeck check if the Stripe hook is ok, how do you check Hookdeck hook is ok ???
@producerumu
@producerumu Год назад
Hey, super interested in your bubble course but I see you took quite a break here on RU-vid. Is the course information up to date?
@jonardballeras3366
@jonardballeras3366 8 месяцев назад
When will you have the promotion code? (e_e) waiting for my Christmas bonus to buy and be part of your Bubble course.
@user-fr4ji5yy3u
@user-fr4ji5yy3u 9 месяцев назад
Hi, Matt. I'm new to bubble and I'm having a hard time with conditions related whether the user is logged in or not. How do make my app notice the user is logged in and restrict them from activities if they aren't then prompt them to log in. Basically saying: If this user is logged in, allow them to do this and that but if they're not make them log in and once they are they can do stuff.
@Darren-kp6ik
@Darren-kp6ik 7 месяцев назад
Mate HELP !!!!!!! Can you please for the love of sanity, please make A tutorial on how to make a blocking function that all messaging apps have from the ground up, showing how to set up the database and the logic and the workflow for the button. As no one and I mean no one has done this so far. Be the 1st to do this !!!!!!!
@DanFarfan
@DanFarfan 11 месяцев назад
WTAF? Bubble has made a completely arbitrary unnecessary unhelpful design decision to not parse the payload properly that prevents a simple hash validation just to create the need out of thin air for a MIDDLEMAN called hookdeck - another point of EVERY TYPE of FAILURE - (owned by somone's brother-in-law, no doubt) so that webhooks ( a well-established industry standard web construct) work for PAYMENTS (a mission critical financial task) with STRIPE (one of the cornerstones of the modern online economy). WTAF. Who is to blame for this abortion? Is this some kind of a no-code no-sense blooper reel? Is this workaround hoop jumping crap all about the Bubble-folks wanting people to only use the Stripe plugin? Is that what's really going on here? Does using the Stripe plugin cost Bubble workunits (for the payment itself), but the API method in the video does not? At this point, this state of the art makes Bubble an impossible choice for any use that intends to scale larger than a local dog walking chain. While it's a safe bet that Bubble can infinite scale because Amazon can. And it's a safe bet that Stripe can infinite scale. The smart money on HOOKDECK being able to is ... NFW. NFW. There has to be more to this story. No one in their right mind would go through all the trouble of creating the most capable and beautiful no code client builder then ... punish people who want to use webhooks.
Далее
How Webhooks work in Bubble
51:57
Просмотров 4,8 тыс.
СЛУЧАЙ В ЧЕРНОБЫЛЕ😰#shorts
00:19
Просмотров 203 тыс.
Building a Webhooks System
10:35
Просмотров 55 тыс.
Design Tips & Tricks in Bubble.io | Tutorial
40:31
Просмотров 2,8 тыс.
Social Engineering - How Bad Guys Hack Users
14:58
Просмотров 48 тыс.
How to protect sensitive parts of your Bubble app
47:10
The moment we stopped understanding AI [AlexNet]
17:38
Просмотров 788 тыс.
How API's work in Bubble
50:21
Просмотров 19 тыс.
How Privacy Rules work in Bubble
22:31
Просмотров 1,4 тыс.
СЛУЧАЙ В ЧЕРНОБЫЛЕ😰#shorts
00:19
Просмотров 203 тыс.