{"product_id":"n8n-appsmax-webhook-hmac-sha256-verify-forward-leads","title":"n8n AppsMax Webhook HMAC-SHA256 Verify \u0026 Forward Leads","description":"\u003ch3\u003eVerify AppsMax webhook authenticity with HMAC-SHA256—then forward only new leads\u003c\/h3\u003e\n\u003cp\u003eThis n8n workflow secures your AppsMax integrations by verifying incoming webhook signatures using \u003cstrong\u003eHMAC-SHA256\u003c\/strong\u003e, filters for \u003cstrong\u003eapplication.created\u003c\/strong\u003e events only, and forwards those leads to your external HTTPS API. AppsMax receives success only when your destination responds with \u003cstrong\u003e2xx\u003c\/strong\u003e.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eReceives AppsMax webhook POST requests\u003c\/strong\u003e and preserves the raw request body for cryptographic verification.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eComputes HMAC-SHA256\u003c\/strong\u003e of the raw payload and compares it to the lowercase-hex \u003cstrong\u003eX-Appsmax-Signature\u003c\/strong\u003e header.\u003c\/li\u003e\n  \u003cli\u003eIf the signature is invalid, it returns \u003cstrong\u003e401\u003c\/strong\u003e and \u003cstrong\u003edoes not process the payload\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eFilters events\u003c\/strong\u003e to forward only \u003cstrong\u003eapplication.created\u003c\/strong\u003e. Other valid events (including \u003cstrong\u003eapplication.test\u003c\/strong\u003e) return \u003cstrong\u003e204\u003c\/strong\u003e without calling your destination.\u003c\/li\u003e\n  \u003cli\u003eUses \u003cstrong\u003eEdit Fields\u003c\/strong\u003e to select the minimum lead data and generates a \u003cstrong\u003estable idempotency key\u003c\/strong\u003e based on the event and application state.\u003c\/li\u003e\n  \u003cli\u003eForwards the JSON payload via \u003cstrong\u003eHTTP Request\u003c\/strong\u003e to your HTTPS endpoint, sending \u003cstrong\u003eIdempotency-Key\u003c\/strong\u003e and \u003cstrong\u003eX-Appsmax-Event\u003c\/strong\u003e headers.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDelivery reliability:\u003c\/strong\u003e a downstream \u003cstrong\u003e2xx\u003c\/strong\u003e returns \u003cstrong\u003e200\u003c\/strong\u003e to AppsMax; \u003cstrong\u003e4xx\/5xx\/timeouts\/network failures\u003c\/strong\u003e return \u003cstrong\u003e502\u003c\/strong\u003e so AppsMax can retry per its delivery policy.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eSend new AppsMax application leads to a CRM or custom lead intake service with verified authenticity.\u003c\/li\u003e\n  \u003cli\u003ePrevent duplicate lead creation using idempotency when AppsMax retries webhook deliveries.\u003c\/li\u003e\n  \u003cli\u003eIgnore non-production or test events (\u003cstrong\u003eapplication.test\u003c\/strong\u003e) while still acknowledging them safely.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003en8n nodes: \u003cstrong\u003ewebhook\u003c\/strong\u003e, \u003cstrong\u003ecrypto\u003c\/strong\u003e, \u003cstrong\u003ecode\u003c\/strong\u003e, \u003cstrong\u003eif\u003c\/strong\u003e, \u003cstrong\u003eset\u003c\/strong\u003e, plus \u003cstrong\u003esticky note\u003c\/strong\u003e guidance.\u003c\/li\u003e\n  \u003cli\u003eUses an n8n \u003cstrong\u003eCrypto credential\u003c\/strong\u003e with the AppsMax secret placed in the HMAC Secret field (attached to the HMAC verification node).\u003c\/li\u003e\n  \u003cli\u003eRelies on AppsMax headers: \u003cstrong\u003eX-Appsmax-Signature\u003c\/strong\u003e and event type filtering (\u003cstrong\u003eapplication.created\u003c\/strong\u003e).\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45814418145459,"sku":"N8N-18009","price":72.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/EkIn0JzN97Z1xVYcGDamS_IvYk7nqd.png?v=1786439306","url":"https:\/\/buyflowscripts.com\/products\/n8n-appsmax-webhook-hmac-sha256-verify-forward-leads","provider":"N8N Commerce","version":"1.0","type":"link"}