● To be secured...
I'm implementing sort of hardened webhook listener and planning to share publicly.
Verifying by nonce is easy and relatively secure in personal environment, but since MacroDroid overwrites any local variables by request, it is vulnerable to be tampered.
Using global variables and processing in separated action blocks will provide more security, however this would be pretty complicated and unefficient.
● Not just about security...
This is not just limited about security aspect. Multiple asynchronous sending and receiving needs to be isolated to avoid complicated verifying.
So it might be useful(or crucial) when multiple (random) devices are involved to communicating using MacroDroid webhook.
Changing dynamically may not easy or prone to be buggy, so applying once at initiating trigger would be fine.
