Webhook authentication header for Google Cloud

Developer Support APIs & Integrations
,
1

Hello, the Webhooks documentation appears to indicate that there is only one way to Authenticate HubSpot webhooks when they are received by the other side: ‘Request Validation with SHA1’.

I’d like to call an endpoint on Google Cloud via the Webhooks; for example, Publish to Topic on PubSub. This requires the usage of Bearer Tokens or Service Account Authentication.

I understand it’s possible to stand up my own API endpoint on CloudRun or similar, to run the Signature Validation logic before further calling up to PubSub etc., by using Service Account impersonation natively inside GCP; but I want to avoid the complexity of an additional component if possible.

Is there a way I’m missing to directly authenticate to GCP APIs from HubSpot webhooks?

2

Hello

As per my knowledge HubSpot webhooks primarily support SHA-1 request validation. To directly authenticate with Google Cloud Platform (GCP) APIs like Pub/Sub from HubSpot webhooks, an intermediary component on GCP is typically required to handle GCP authentication and forward data securely. You can check Accounts Dashboard | HubSpotPower BI Training

Thank you.

3

I have the same issue. I will try to add a GCP API key in the URL. I also need a solution for this.

Customizing webhook request headers is impossible.