Node.js / Express js : Best practice to consume Webhook secret & type

Question

I am working with an external API and need to consume its webhook notifications.

This external service will include in the notification a "secret", a static