Webhooks

Rotate a webhook secret

Mints a new secret and answers it — once, like a create. The old one goes on being honoured for 24 hours: every delivery in that window carries two signatures on the one webhook-signature header, new first, separated by a space, and a verifier that accepts either passes throughout. Rotating again inside the window replaces the previous secret rather than keeping three.

Requires the member role or higher.

post/webhooks/{id}/rotate

Request

  • Base URL: https://app.mandala.computer/api/v1
  • URL: https://app.mandala.computer/api/v1/webhooks/{id}/rotate
  • Auth: HTTP bearer

Path parameters

idstring required

The webhook id.

Response

The subscription, with its new secret — shown once.

idstring required

whk- and sixteen hex characters.

urlstring required

Where deliveries are POSTed.

descriptionstring required
eventsstring[] required

As on Webhook.

computersstring[] required

As on Webhook.

enabledboolean required
disabled_reasonstring nullable required
disabled_atstring nullable required
last_success_atstring nullable required
last_failure_atstring nullable required
last_statusinteger nullable required
workspace_idstring

As on Webhook: present only on a workspace-confined subscription.

created_atstring required

RFC 3339 timestamp.

updated_atstring required

RFC 3339 timestamp.

secretstring required

The signing secret: whsec_ and 44 characters of base64. Shown here and never again — store it now. Every delivery is signed with it; see the resource description for how to verify.

Changes

No recorded changes to this operation across all 1 revision of this API.