keys

Rotate Webhook Secret

Replace the signing secret, without breaking the receiver you have deployed.

The secret you were using keeps being sent alongside the new one for a window, so every delivery in that period carries a signature under each and a receiver verifying against either passes. Deploy the new secret whenever it suits you; nothing fails in between.

Rotating twice inside one window drops the older of the two — the window is what a receiver is given, not a chain to accumulate.

post/v1/webhooks/secret/rotate

Request

  • Base URL: https://api.craterview.ai
  • URL: https://api.craterview.ai/v1/webhooks/secret/rotate
  • Auth: HTTP bearer

Response

Successful Response

secretstring required

Verify a delivery by computing HMAC-SHA256 of <CV-Timestamp>.<body> under this value and looking for the result among the comma-separated values in CV-Signature.

previousstring nullable

The secret this one replaced, while it is still being sent alongside. Null unless a rotation's window is open.

overlap_ends_in_secondsnumber nullable

How much longer deliveries carry a signature under previous. Null when no rotation is in progress.

Changes

No recorded changes to this operation across all 1 revision of this API.