APIs & Integrations

Contributor | Elite Partner
Contributor | Elite Partner

Installin the App in hubspot

I have a question about the public Apps and app installations: I am building an integration App. Once I have my app installed in the HubSpot account how should I secure my exposed endpoins (for example /webhook)  to be available only for authorised users. At the moment my endpoints are open and making requests in Postmen impacts my app and make changes in hubspot account?
In this block of code what kind of logic should i use for the function "isAuthorized"?

app.post("/webhook", async (req, res) => {
    if (isAuthorized(req.sessionID)) {
       //do something
    } else {
        res.send("not authorized")

Thank you in advance 🙂

1 Reply 1
Community Manager
Community Manager

Installin the App in hubspot

Hey, @lstepany 👋 Great question. I don't have a HubSpot specific documented answer for this one. I assume it's a challenge others have tackled successfully in the past. 


Let's invite some of our community members to the conversation — hey @JBeatty @tominal @albertsg, can you share how you've handled this in the past? 


Thank you! — Jaycee


Jaycee Lewis

Developer Community Manager

Community | HubSpot