Issue #3452221 by scambler, sanduhrs: Not verifying token

src/WebhooksService.php

@@ -280,7 +280,7 @@ class WebhooksService implements WebhookDispatcherInterface, WebhookReceiverInte
       Webhook::verify($webhook_config->getSecret(), $request->getContent(), $webhook->getSignature());
     }
     // Legacy webhooks often only use a secret token.
-    elseif ($webhook_config->getSecret() || $webhook->getToken()) {
+    elseif ($webhook_config->getToken() || $webhook->getToken()) {
       Webhook::verifyToken($webhook_config->getToken(), $webhook->getToken());
     }