Merge pull request #115 from github/update-docs

docs: Add curl examples for shared secret authentication

Author: nobe4

docs/auth_plugins.md

@@ -345,6 +345,13 @@ auth:
   header: Authorization
 ```
 
+```bash
+curl -X POST "https://your-hooks-server.com/webhooks/example" \
+  -H "Authorization: your-shared-secret" \
+  -H "Content-Type: application/json" \
+  -d '{"event":"test","data":"example"}'
+```
+
 **Custom header shared secret:**
 
 ```yaml
@@ -354,6 +361,15 @@ auth:
   header: X-API-Key
 ```
 
+```bash
+curl -X POST "https://your-hooks-server.com/webhooks/example" \
+  -H "X-API-Key: your-shared-secret" \
+  -H "Content-Type: application/json" \
+  -d '{"event":"test","data":"example"}'
+```
+
+> **Note:** The shared secret is sent as plain text directly in the header value. No `Bearer` prefix or encoding is required. Always use HTTPS to protect the secret in transit.
+
 ## Custom Auth Plugins
 
 This section provides an example of how to implement a custom authentication plugin for a hypothetical system. The plugin checks for a specific authorization header and validates it against a secret stored in an environment variable.