Calculating sha256 for Ghost webhook

[vikaspotluri123]

The signature includes a timestamp, you’ll need to strip it:

Issue Title: Unable to Verify Ghost Event Using Webhook

You can set a webhook secret. Here’s how the secret is generated (tldr: hmac of the request payload signed with the shared secret):

Issue Title: Unable to Verify Ghost Event Using Webhook

Issue Summary Issue Title: Unable to Verify Ghost Event Using Webhook Problem: I am currently working on integrating webhooks from my Ghost website into my server, and I’m having trouble understanding how to verify that the events received by my server are indeed from my Ghost website and not from a potential malicious source. Context: I have set up webhooks in my Ghost website to notify my server of certain events such as new post creation, but I’m not sure how to implement authentication o…