Webhook authentication
Webhook
How the receiver verifies a webhook came from the vendor. Wavelynx uses a static x-api-key header (with optional mutual TLS pinning). HID lets the partner pick: Basic Auth header or an API Key header with a custom header name + secret.
What other systems call it
Per-vendor / per-standard terminology for this same concept.
| System | Term / Notes |
|---|---|
 Wavelynx | x-api-key (static) + optional TLS pin |
| HVHID v3.x | Basic Auth OR API Key (custom header name + secret) |