New Feature: OAuth2 Authentication Support for Webhooks

Irina Doliov
Sep. 2, 2015 by Irina Doliov

Oauth2 and WebhooksThis month, we’ve introduced yet another new security feature to SparkPost: the ability to use OAuth2 in setting up webhooks. Specifically, in order to increase the security of our webhooks events data, we have added support for OAuth2 authentication in addition to the Basic Authentication. These are optional security measures that are used to ensure that webhook data delivered via an HTTP request originate from SparkPost.

What is Basic Auth? Basic Auth is a relatively simple mechanism that allows a user to provide a username and password that is passed in with the webhooks data in the http request. This is something anyone can — and should do. SparkPost has supported this mechanism for several months.

What is OAuth2? OAuth2 is an open standard for authorization. OAuth2 provides client applications a ‘secure delegated access’ to server resources on behalf of a resource owner by use of a temporary token. This Digital Ocean overview provides a relatively short and readable overview of how this works. For those who prefer to get into the weeds, here is the actual specification.

Why Oauth2? In a word, security. SparkPost, and our parent Message Systems take the security of our systems very seriously and we continue to add functionality to enhance security of the data entrusted to us. This includes using API keys, whitelisting the IPs of those API keys, 2-factor authentication to access Sparkpost accounts and other behind-the-scenes enhancements. Needless to say more security enhancements are coming.

~ Irina Doliov, Cloud Queen

Related Content

4 Questions to Ask Before Migrating Your App or Service to the Cloud

Cloud migration involves major changes to business processes and company culture. Here are four questions you should ask before embarking on this adventure.

read more

4 Great Use Cases for Interactive Emails

We’ve gathered four great use cases that highlight how an interactive email can bring more web-like functionality into an email message.

read more

End-To-End Email Testing With MailSlurp

Learn how to conduct end-to-end email testing to confirm delivery to your recipient's inbox with the MailSlurp API and SparkPost.

read more

Get started and start sending

Try SparkPost and see how easy it is to deliver your app’s email on time and to the inbox.

Try Free

Send this to a friend