OAuth2.0

Alloy support two grant types: Client Credentials, and Password.

OAuth 2.0 allows the webhook sender to obtain an access token from an authorization server and include it in each webhook request. The webhook server then verifies the token to ensure the request is authorized and comes from a trusted source. This helps secure webhook communication by replacing static secrets with time-limited, scoped tokens.