Webhooks

Read the webhook signing secret

Changed on

The secret every delivery to this workspace's callbacks is signed with, minted on first read. Verify a delivery by computing HMAC-SHA256 over {webhook-id}.{webhook-timestamp}.{raw body} and comparing it to webhook-signature — or hand the secret to any Standard Webhooks library, which does exactly that.

This is a credential: anyone holding it can forge deliveries into your receivers.

get/v1/workspaces/{workspace_id}/webhook-secret

Request

  • Base URL: https://api.app.layer.ai/api
  • URL: https://api.app.layer.ai/api/v1/workspaces/{workspace_id}/webhook-secret
  • Auth: one of:
    • HTTP bearer
    • OAuth 2 (authorization code, authorization URL https://auth.app.layer.ai/authorize, token URL https://auth.app.layer.ai/oauth/token)
    • OAuth 2 (client credentials, token URL https://api.app.layer.ai/api/oauth/token, scopes: workspace:write)

Path parameters

workspace_idstring uuid required

Id of the workspace that owns the resource.

Response

Successful Response

secretstring required

The workspace's current signing secret, in whsec_ form.

Changes

  • 326f3bcdabccRevision changes
    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

  • 2d86d473cda6Revision changes
    • info

      the endpoint scheme security serviceAccount was added to the API

    • info

      the security scope workspace:write was removed from the endpoint's security scheme oauth2