[SOLVED] IP execution permission

Can I limit my execution to be run by certain IP's.

I am listening to a webhook with a function I want to limit that the function so that only certain IP's ie from where the webhooks origin can call that function. Can I do that in Appwrite,

There is not a direct way to do it directly in Appwrite

However you could do it with a firewall or waf like cloudflare one

I am using Cloud.

How can I add project Id in the header its the webhook via apple

Then it's not possible the solution I proposed. The only way I see it is by passing manually the IP to the function and checking the IP with a condition inside it

The problem I see there is that someone could fake the IP so I don't see it as a solution if you need this for security reasons

A potential solution could be getting the IP from the users API by checking the session. However if the user logins in a differente IP, it will not manage to create anything

Okay

Usually, you're able to configure some sort of secret or auth header. What webhook are you using?

Besides that, have you tried dumping all the headers in the Appwrite function to see if there's anything you can use?

I am using apple in app purchase notification webhook

how can i add auth to that apple automatically send it on purchase

According to this, there's a signed payload, so you can verify the signed payload in your function code:

https://developer.apple.com/documentation/appstoreservernotifications/receiving_app_store_server_notifications

Thanks

[solved] IP execution permission

[SOLVED] IP execution permission