Skip to main content
Solved

Incoming IP addresses for webhooks?

  • October 12, 2021
  • 4 replies
  • 1369 views

Forum|alt.badge.img+2

Hi,

we have internal test servers where we would also like to develop our webhook endpoints on so we can test receiving events from the RevenueCat API. Those servers are obviously only accessible from our internal network by default.

To make the webhook URLs accessible for RevenueCat, I’d like to know what IP range the requests would be coming from, so I can configure our firewall accordingly.

Thanks a lot,

Markus

Best answer by Markus Wolff

ryan wrote:

Hey Markus! 

Right now, the webhook IP range is variable so there isn’t anything fixed to hardcode on your side. To authenticate requests you can add an authorization token to the webhook configuration in RevenueCat that you can then verify on your server.

Thanks Ryan, we solved it by using a reverse proxy instead :-)

View original
Did this post help you find an answer to your question?

4 replies

ryan
RevenueCat Staff
Forum|alt.badge.img+9
  • RevenueCat Staff
  • 391 replies
  • October 12, 2021

Hey Markus! 

Right now, the webhook IP range is variable so there isn’t anything fixed to hardcode on your side. To authenticate requests you can add an authorization token to the webhook configuration in RevenueCat that you can then verify on your server.


Forum|alt.badge.img+2
  • Author
  • Helper
  • 1 reply
  • Answer
  • October 13, 2021
ryan wrote:

Hey Markus! 

Right now, the webhook IP range is variable so there isn’t anything fixed to hardcode on your side. To authenticate requests you can add an authorization token to the webhook configuration in RevenueCat that you can then verify on your server.

Thanks Ryan, we solved it by using a reverse proxy instead :-)


Forum|alt.badge.img+2

Hi @ryan 

Does the IP range still variable or do you have some static IP? Here in company we’ve facing problems to use RevenueCat Webhook, because we are blocking every IP outside Brazil.

Thanks


Hi! I’d also like to know if you have configured static IPs? If not, it would be a great security feature to add. A lot of orgs have a default deny-all inbound firewall policy, and without static IPs from integrations it’s impossible to allow them in.

Thanks,

Michael


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings