Eventbrite Webhook Access with Cloudflare One-Time-Pin Protection

Zero Trust Cloudflare Tunnel
1

Hello! I am using a Cloudflare Zero Trust Tunnel to set up webhook access to a private server.
I’ve also set up a one-time-pin authentication for accessing the website.

I’m trying to use a webhook via Eventbrite, but I receive a “302” error. I found this thread which encountered similar issues on GitHub.

The solution was to access the api here, which lists the IP Addresses that GitHub uses to send webhooks. Then, allowlist those IP Addresses on Cloudflare.

However, I can’t find a similar list of IP Addresses for Eventbrite. I dug through the API, the documentation, and reached out to their help team, but unfortunately the person I talked to didn’t understand the request.

Does anybody have any suggestions as to how I could properly allowlist Eventbrite’s webhook calls?

Thanks!

1 Like
3

Update: I found this page, which states the following:

We have a dynamic infrastructure on AWS and we are unable to provide an exact IP range, but you can filter based on our custom headers (X-Eventbrite-Event: order.placed or X-Eventbrite-Delivery: 1763382) or user agent (User-Agent: Eventbrite Webhooks (Dilithium)).

I don’t see any way to set up a policy to filter by custom headers or user agents. Could somebody point me in the right direction?