We are considering to use MongoDB AppServices HTTPS endpoints to implements a Webhook receiver.

We have configured API keys as authentication provided.

Our concern is that the external service that will POST a request to this endpoint will add the API key under a HTTP header with a specific name that cannot be configured, let's say X-Foo, and doesn't align with the header name apiKey expected by AppServices.

The same can be considered for other authentication provided (custom, email, ...).