Rotate the calling application's webhook signing secret

Generates a new webhook signing secret for the authenticated application, stores only its hash, and returns the raw secret once.

Use the returned webhookSecret to verify X-IDaaS-Signature on inbound webhooks. The previous webhook secret becomes invalid immediately.

post/v1/applications/webhook-secret/rotate

Request

Base URL
https://idaas.yourflexpay.com/api
Auth
HTTP bearer
TypeScript
https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api/docs/v1/applications/webhook-secret/rotate/post.ts
A function with typed inputs. Its response is checked against the schema.

Webhook secret rotated - new secret returned once

successboolean

messagestring

errorCodestring

errorsstring[]

timestampstring date-time

{
  "data": {
    "appHandle": "walletapp",
    "keyVersion": 1
  }
}