Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Stefan Helzle — Tue, 27 Feb 2024 12:37:15 GMT

Make sure to validate these signatures before forwarding the call to Appian.

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Angel Enrique Garcia Adasme — Tue, 27 Feb 2024 12:27:01 GMT

Hi Mathieu, at the begining I thought that was the way to authenticate it, but when I tried the post token method I retrieved an error because the api-key format wasn't accepted. At the end I think it's a hash to verify the origin of the call. I'm going to try the APIM, thank you for your reply.

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Mathieu Drouin — Tue, 27 Feb 2024 12:09:18 GMT

Only seems to support a "secret token" which is surprising like Stefan has mentioned.

I think you probably have the best solution with the APIM.

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Angel Enrique Garcia Adasme — Tue, 27 Feb 2024 11:58:55 GMT

Hi Stefan, I thought the same, but actually an autodesk webhook configuration only expect a callbackurl (https://aps.autodesk.com/en/docs/webhooks/v1/reference/http/webhooks/systems-system-events-event-hooks-POST/).

Finally I will use an API manager which recieve the webhook call and comunicates with appian.

Thanks anyway for your reply

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Stefan Helzle — Tue, 27 Feb 2024 10:04:20 GMT

You could try to use basic authentication like in the curl examples:

https://docs.appian.com/suite/help/23.4/Web_API_Authentication.html#api-key-authentication

RE: Trying to create a webhook on Autodesk where the callbackUrl is an Appian web API

Stefan Helzle — Tue, 27 Feb 2024 10:00:20 GMT

No, any API access to Appian must be authenticated. But, to be honest, I find it hard to believe that Autodesk does not support authentication for callbacks.