Installin the App in hubspot

Developer Support APIs & Integrations
1

Hi!
I have a question about the public Apps and app installations: I am building an integration App. Once I have my app installed in the HubSpot account how should I secure my exposed endpoins (for example /webhook) to be available only for authorised users. At the moment my endpoints are open and making requests in Postmen impacts my app and make changes in hubspot account?
In this block of code what kind of logic should i use for the function “isAuthorized”?

app.post(“/webhook”, async (req, res) => {

if (isAuthorized(req.sessionID)) {

//do something

} else {

res.send(“not authorized”)

}

})

Thank you in advance :slightly_smiling_face:

2

Hey, @lstepany :waving_hand: Great question. I don’t have a HubSpot specific documented answer for this one. I assume it’s a challenge others have tackled successfully in the past.

Let’s invite some of our community members to the conversation — hey @JBeatty @tominal @albertsg, can you share how you’ve handled this in the past?

Thank you! — Jaycee