I’m trying to configure an Octopus subscription using a webhook notification. I’ve configured one using the Requestbin online tool to see what data I can expect and all this works fine.
I’ve now developed a custom webhook using ASP.NET Core. It accepts a JSON payload and is a POST method. The problem is getting Octopus to access this webhook as it’s installed on our local infrastructure environment.
What are the best options for allowing Octopus access to our webhook without compromising the security of our environment?
Can Octopus post subscription data to a webhook that uses a port number?
e.g. https:\mydomain\mywebhookendpoint:444
If this is not possible, what other options are available to me?
Thanks for getting in touch! Interesting question - it looks like the best way for getting this to work securely is to add a header to your request that contains an authorization token that you trust on the webhook side.