This is a bug as the Authorization header shouldn't take effect if no auth is configured in the webhook
To leave a comment, please authenticate.