Triggers

Rotate Trigger Signing Secret

Changed on

Mint this trigger's ingress address and signing secret, or rotate them.

Rotation replaces the stored secret, so the previous one stops verifying on the next delivery: there is no grace window, deliberately. A webhook secret is rotated because it leaked, and a grace window is exactly the period the leak is still useful.

The address (public_id) is minted once and kept across rotations, so rotating a secret does not require reconfiguring the caller's URL.

post/api/v1/triggers/{trigger_id}/signing-secret

Request

  • The document declares no server URL.
  • Auth
    • OAuth 2
      Password
      Token URL: api/v1/login
    • or API key in query parameter x-api-key
    • or API key in header x-api-key

Path parameters

trigger_idstring uuid required

Response

Successful Response

has_signing_secretboolean required
ingress_urlstring nullable required
public_idstring nullable required
signing_secretstring required
trigger_idstring uuid required

Changes