the current webhook set a specific header with a bearer in it, the user should be able to choose it : authorisation bearer api-key apiKey, custom