Forum Discussion
Azure teams bot - verify request source/content
Hi,
Before processing message by our application , we want to validate if the message is sent from MS teams and someone is not impersonating.
Does Teams Azure bot support any HMAC signature implementations? or something else that can ensure the request body hasn't changed?
Like here:
https://stackoverflow.com/questions/47633603/verifying-hmac-from-microsoft-teams-custom-bot-in-php
https://stackoverflow.com/questions/43278132/verifying-hmac-from-microsoft-teams-bot-in-python-flask
Thanks
2 Replies
Nivedipa-MSFTMicrosoft
chisr - Could you please track this issue here: https://stackoverflow.com/questions/78811619/ms-teams-azure-bot-verify-request-content- Thanks.
Is there no other way to verify that the content has not changed ?
What do you suggest to do in the meantime, check only the token parts (exp, iss, aud) ?
