[#1109] Custom header/parameter/data in trigger callback

Feature Requests
,
1

Migrated from Redmine #1109 | Author: Norbert K
Status: New | Priority: Normal | Created: 2023-09-21

Hi,

In case of a trigger callback I cannot verfiy on my side that the request really comes from simplybook.
I would like to add either a custom parameter to the callback URL (it is cut off at the moment if I add parameters to he url), or to be able to set an api_key which is sent in the header or along with the post data.

Thanks.

2

Redmine Admin wrote:

hi, you can always call back simplybook API with received id to check detailes.

3

Norbert K wrote:

Hi,
You are right, that’s what I’m doing.

I’m validating the callback post data fields (company, booking_id) and I have an intermediate step to store the callbacks in our database, to process them one-by-one, not to call the simplybook authorization concurrently, and to make sure I get the booking details in case of connection error.

However it would be nice to add an extra security layer, not to do the above steps if the api_key does not match.