Securing Webhooks

mark.shapiro

In reading https://fusionauth.io/docs/v1/tech/events-webhooks/securing it mentions locking down your webhook via various firewall settings to only allow requests coming from a FusionAuth IP address.

Where can I find that CIDR range(s) to implement? How often do those values change?

dan

If you are self-hosting FusionAuth, you will control the CIDR ranges.

FusionAuth cloud hosted instances currently don't have a fixed CIDR range. There's an open issue you can follow for future developments: https://github.com/FusionAuth/fusionauth-issues/issues/1393

mark.shapiro

@dan Yah this is for Cloud hosted (unfortunately?) sounds like we'll just need to stick with the existing auth/security options for now then.