platform · inferred from evidence
Nango
A platform that triggers events like post-connection-creation and pre-connection-deletion, and handles webhook forwarding.
- Verify the connection ID to avoid malicious attempts to store credentials for another user
Covers this Nango problem: Verify the connection ID to avoid malicious attempts to store credentials for another user. [bastienbeurier (member)]: To stop attackers spoofing user accounts during OAuth, Nango added HMAC verification.
- Forwarded external webhooks arrive without Nango connection metadata
What caused "Forwarded external webhooks arrive without Nango connection metadata" and the fix that actually worked. Distilled from the thread where it was verified.