Google Cloud Pub/Sub Webhooks (Push Subscriptions)

When to Use This Skill

• How do I receive Google Cloud Pub/Sub messages at an HTTP endpoint?
• How do I verify a Pub/Sub push request is really from Google?
• How do I validate the OIDC JWT in the Authorization: Bearer header?
• Why does Pub/Sub keep redelivering the same message to my webhook?
• How do I decode message.data from a Pub/Sub push envelope?
• Why is my Pub/Sub push endpoint returning 401?

How Pub/Sub Push Differs From HMAC Webhooks

Pub/Sub is not a signed-webhook provider. Read this before looking for a signature header — there isn't one.