Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

K Khan
Nov 12, 2015
(2 votes)

WebHooks Sender and Receiver

Microsoft ASP.NET WebHooks makes it easier to both send and receive WebHooks as part of your an ASP.Net application so for an EPiServer application also. I have been given a chance for a technical talk with fellow EMVP Mark Everard at EPiServer UK Ascend. I have presented a demo Server that was responsible to subscribe alloy site and publish an event. On other hand Alloy site was accepting those changes via Microsoft ASP.Net WebHooks.

On the receiving side, ASP.NET WebHooks provides a common model for receiving and processing WebHooks from any number of WebHook providers. In my case Alloy site will be a receiving side processing a change of display name received from a Demo server.

On the sending side, ASP.NET WebHooks provides support for managing and storing subscriptions as well as for sending event notifications to the right set of subscribers. In my case Demo server will send notification to (subscriber ) alloy site for defined set of event 'entryupdating'.

A console demo server application can be downloaded, that will subscribe alloy site and will publish an event that a display name has been changed for a product.

To set-up a receiver, you will require some exercise.

Download and set-up Alloy site.

Install a custom webhook receiver Nuget Package 

Initialize the Custom WebHook Receiver

public static void Register(HttpConfiguration config)
            // Web API routes
            // Initialize Custom WebHooks Register

Add following application settings in Web.config

  <add key="MS_WebHookReceiverSecret_Custom" value="12345678901234567890123456789012" />

Add a handler, that will receive changes

public class Handler : WebHookHandler
        public Handler()
            this.Receiver = "custom";

        public override Task ExecuteAsync(string receiver, WebHookHandlerContext context)
            JObject entry = context.GetDataOrDefault<JObject>();
            CustomNotification notification = entry["Notifications"][0].ToObject<CustomNotification>();
            if (notification.Action == "entryupdating")
                UrlResolver resolver = ServiceLocator.Current.GetInstance<UrlResolver>();
                var contentRepository = ServiceLocator.Current.GetInstance<IContentRepository>();
                var product = resolver.Route(new EPiServer.UrlBuilder(string.Format("http://localhost:51481/en/{0}/", notification.ProductId)));
                var page = contentRepository.Get<ProductPage>(product.ContentLink).CreateWritableClone();

                if (page != null)
                    page.Name = notification.ProductName;
                contentRepository.Save(page, EPiServer.DataAccess.SaveAction.Publish, EPiServer.Security.AccessLevel.NoAccess);
            return Task.FromResult(true);   

In case if you will be wondering what is CustomNotification

public class CustomNotification
        public string Action { get; set; }

        public string ProductId { get; set; }
        public string ProductName { get; set; }

How To Run:

Run Alloy Site (in debug mode to see what WebHookHandlerContext contains)

 Image alloy0.JPG

Run Console application (It will subscribe alloy in memory of console application and will publish change of display name)

Refresh your browser
Image alloy.JPG

(Don't ask! can we not do this using CMS Online center :) )

You will have to bear with me for few more blogs on this topic.

Happy Hooks!

Nov 12, 2015


Per Magne Skuseth
Per Magne Skuseth Nov 13, 2015 10:40 AM


K Khan
K Khan Nov 13, 2015 11:48 AM

Its a food of thought for system architecths. They can think outside of the boundries with this option. It can help a lot in Commerce Projects where multiple systems and technologies are working togather. e.g. in Pricing or inventory updates, Order fulfilments etc.

Please login to comment.
Latest blogs
Google Read Aloud Reload Problems

Inclusive web experiences greatly benefit from accessibility features such as Google Read Aloud. This tool, which converts text into speech, enable...

Luc Gosso (MVP) | Dec 4, 2023 | Syndicated blog

Google Read Aloud Reload Problems

Inclusive web experiences greatly benefit from accessibility features such as Google Read Aloud. This tool, which converts text into speech, enable...

Luc Gosso (MVP) | Dec 4, 2023 | Syndicated blog

Import Blobs and Databases to Integration Environments

In this blog, we are going to explore some new extensions to the Deployment API in DXP Cloud Services, specifically the ability to import databases...

Elias Lundmark | Dec 4, 2023

Join the Work Smarter Webinar: Working with the Power of Configured Commerce (B2B) Customer Segmentation December 7th

Join this webinar and learn about customer segmentation – how to best utilize it, how to use personalization to differentiate segmentation and how...

Karen McDougall | Dec 1, 2023