**Authentication**

We encourage you to protect your endpoint by requiring one of the following authentication methods:

- Custom Header  
- Basic Auth

**Custom Header Authentication**

Wherewolf’s webhook requests can be configured to include a custom header, you can use this to authenticate the request.

When configured, the request will contain the custom field and custom value.

Example:

```
curl -X POST 
  __YOUR_URL__ \ 
  -H 'Cache-Control: no-cache' \ 
  -H 'Content-Type: application/json' \ 
  -H '__CUSTOM_AUTH_FIELD__: __CUSTOM_AUTH_VALUE__' \ 
  -d '{
    ...payload...
  }'
```

**Basic Auth Authentication**

`Basic Auth` method is supported for Wherewolf’s webhook requests.

When configured, the request will contain a `Authorization` header with the base64 representation of a given `username:password`.

Example using username `an_user` and password `a_password`:

```
curl -X POST 
  __YOUR_URL__ \ 
  -H 'Cache-Control: no-cache' \ 
  -H 'Content-Type: application/json' \ 
  -H 'Authorization: Basic YW5fdXNlcjphX3Bhc3N3b3Jk' \ 
  -d '{
    ...payload...
  }'
```

For more details about Basic Auth:  
[MDN Web Docs HTTP authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#Basic_authentication_scheme)