Sandbox webhook doesn't work

Support
1

Hi,

I configured webhook url in both Settings->General and Notifications but it doesn’t work.

On our end we’ve whitelisted 3.134.25.131, 3.23.47.185 IP addresses.
Webhook Url: https://edge.dev.vavo.dev/treasury/custody-fireblocks/webhooks

Thanks,
Yevhen

2

Hey @Yevhen,

I can see that we are getting HTTP 403 from the following endpoint when trying to send the webhook message:
https://edge.dev.vavo.dev/treasury/custody-fireblocks/webhooks

Any chance that you are failing the signature verification on your side?

Can you confirm that you using the following public key for the signature verification?

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+fZuC+0vDYTf8fYnCN6
71iHg98lPHBmafmqZqb+TUexn9sH6qNIBZ5SgYFxFK6dYXIuJ5uoORzihREvZVZP
8DphdeKOMUrMr6b+Cchb2qS8qz8WS7xtyLU9GnBn6M5mWfjkjQr1jbilH15Zvcpz
ECC8aPUAy2EbHpnr10if2IHkIAWLYD+0khpCjpWtsfuX+LxqzlqQVW9xc6z7tshK
eCSEa6Oh8+ia7Zlu0b+2xmy2Arb6xGl+s+Rnof4lsq9tZS6f03huc+XVTmd6H2We
WxFMfGyDCX2akEg2aAvx7231/6S0vBFGiX0C+3GbXlieHDplLGoODHUt5hxbPJnK
IwIDAQAB
-----END PUBLIC KEY-----
3

The public key is correct.
We see that requests came from those IPs:

  • 3.141.88.232
  • 18.223.19.147

Could you confirm what IP addresses should be whitelisted?

4

Hello @Yevhen I can confirm those IP addresses belong to Fireblocks. I believe the 403 issue is regarding your request being forbidden because of an issue with your WAF / Proxy / Firewall which blocks incoming webhook.

5

All is good now.
Could you please update documentation with additional IPs?