Webhooks

Replace the signing secret (shown once); the previous one signs for 24 more hours

Answers the new whsec_... secret, shown only here. Until 24 hours from now every delivery carries two signatures, v1=<new>,v1=<old>, and a receiver that accepts any match (the published recipe) keeps verifying with either secret while you switch. A receiver that compares the whole header fails during the window: make it split on the comma before rotating. The previous secret stays valid for those 24 hours; if it leaked, rotate a second time right away, that ends it at once.

post/api/v1/webhooks/{subscription_id}/rotate-secret

Request

  • Base URL: https://api.hub-equity.com
  • URL: https://api.hub-equity.com/api/v1/webhooks/{subscription_id}/rotate-secret
  • Auth: HTTP bearer

Path parameters

subscription_idstring required

Response

Successful Response

successboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.