Validate signature in response from URLFetch

Asked Apr 8, 2023·1 reply·Last activity 3 years ago·Open in Discord ↗
Archived from the original community forum
Things may have changed since it was written. Still stuck? Ask the community on Discord.

Hi all, in URL Fetch documented here: https://docs.nightbot.tv/variables/urlfetch

Included is a Nightbot-Response-Url: https://api.nightbot.tv/1/channel/send/TVRRM05UazRNVGsyT1RnNE1TOWthWE5...

How can I validate that signature? Ultimately when I hit my backend api, I want to validate that the request indeed came from nightbot and not just being spoofed. The other headers seem like they can be easily spoofed.

But I can't decode / validate that signature without knowing the original key. So any thoughts?

1 reply