I've always had a small bit of simmering resentment when something wants me to set up a webhook into my system, and provides no way of authorizing the hook. St

I've always had a small bit of simmering resentment when something wants me to set up a webhook into my system, and provides no way of authorizing the hook. Stripe and Twilio do it best, with signatures that verify they're the ones sending the hook, but I'd even settle for http basic auth. So many of them seem to say "hey here's the IP addresses well be sending raw posts to your provided URL with, btw these IPs can change at any time without warning.