Search the practice set

126 questions, 454 terms and 400 topics in 20 areas.

2 results for “Webhooks”

Questions · 1

Run a threat model on a new payment integration: our service calls a third-party payment provider and receives webhooks. Where are the interesting threats?

Draw the boundaries first Three trust boundaries, and nearly every interesting threat lives on one of them: 1. User → our service (untrusted input, authenticate

Threat Modelling

Topics · 1

topic

Webhooks

Push callbacks, signature verification, ordering and at-least-once delivery.

API & Integration Architecture — no content yet