Webhooks

Revoke the previous webhook endpoint secret

Changed on

Closes a rotation's overlap window early: the previous secret stops verifying immediately, leaving only the current secret valid. Call this once you've fully switched to the new secret, rather than waiting for previous_secret_expires_at to pass.

Subsequent deliveries are signed with the current secret only, so the X-Kit-Signature header goes back to carrying a single v1 entry.

post/v4/webhook_endpoints/{id}/revoke_previous_secret

Request

  • Base URL
    https://api.kit.com
  • URL
    https://api.kit.com/v4/webhook_endpoints/{id}/revoke_previous_secret
  • Auth
    • API key in header X-Kit-Api-Key
    • or OAuth 2
      Authorization code: https://api.kit.com/v4/oauth/authorize
      Token URL: https://api.kit.com/v4/oauth/token

Path parameters

idinteger required

Response

Revokes the previous secret, closing the rotation overlap window

Changes