[web2py] Re: Authorization for Webhooks

[pbreit]

Can you just read the cookie and match it to a session? Do these callbacks 
occur quickly enough that the session has not expired? I don't know exactly 
how sessions work but I could imagine there's be problems using sessions 
with callbacks since the callback is not technically "logged in" (it has 
stolen a cookie).