Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

source-http-ingest: support Okta "verification" challenge #2433

Open
psFried opened this issue Feb 20, 2025 · 0 comments
Open

source-http-ingest: support Okta "verification" challenge #2433

psFried opened this issue Feb 20, 2025 · 0 comments
Assignees

Comments

@psFried
Copy link
Member

psFried commented Feb 20, 2025

Okta has this weird "verification" step that they do before they'll start sending webhooks. The process is described here, and there's some example code here. The TLDR is that they send a GET request with an x-okta-verification-challenge header, and we just need to echo back that header value as part of a JSON response. I can't imagine what's actually being verified with this, apart from the fact that the endpoint was specifically intending to support Okta webhooks. But it seems to be required, and is probably the easiest way for us to support capturing data from Okta.

I'm thinking that the easiest thing would be to just automatically create routes for all bindings that handle these GET requests. They'd be harmless in other usages of the connector, so I see no reason to conditionally enable them or add new endpoint configuration.

@psFried psFried self-assigned this Mar 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant