How to validate the signature of a GitHub webhook using Node.js

1 · Nicholas C. Zakas · Aug. 5, 2020, 8 p.m.
When you have GitHub send a webhook to your server, you can optionally specify a secret that is used to generate a signature for the webhook request. It’s highly recommend to use the secret to check the signature of the payload to ensure it’s actually coming from GitHub. You’ll need to generate a signature based......