Description - The Webhook module in Fusion exposes an API to be called which is not protected by any secured/modern authentication method. There is a way to apply a filter on the request to check for an authentication header, but that would only support Basic Auth. Adding a native support for OAuth (likely using the Adobe IO credentials) would be a great addition to expand the use of the Webhook APIs.
Why is this feature important to you - We (Best Buy) have a lot of use cases where we would want to push data from other applications into Fusion and eventually update it in Workfront. Right now, we cannot use the Webhook module because the API is not protected and doesn't support OAuth which is a core requirement by our enterprise security.
How would you like the feature to work - The Webhook module should be supporting the OAuth 2 authentication which could use an Adobe IO project to generate the client credentials and validate the auth token passed in the header for the Webhook API request against Adobe IO, similar to other IO integrations like for Asset Compute, User Mapping API etc.
Current Behaviour - Fusion's Webhook module does not support any authentication for the API, rather there is a workaround that could be used to support Basic Auth using the request filter which can validate the auth header against a constant value.
