SIsinch
brand-callbacks

Rotate the HMAC secret for webhook signing.

Generates a new server-side HMAC secret for the specified project and replaces the existing one. The full secret is returned once in the response body — this is the only time it is visible in plain text. Store it securely immediately after this call.

Use this endpoint when you want Sinch to generate a cryptographically random secret rather than supplying your own.

post/v1/projects/{projectId}/callbackConfig/rotate

Request

  • Base URL
    https://compliance.api.sinch.com
  • URL
    https://compliance.api.sinch.com/v1/projects/{projectId}/callbackConfig/rotate
  • Auth
    OAuth 2
    Client credentials
    Token URL: https://auth.sinch.com/oauth2/token scopes: write

Path parameters

projectIdstring required

Customer's project id

Response

New secret generated. The full secret is returned once — store it securely.

projectIdstring

Project ID this callback configuration belongs to.

hmacSecretstring password

The full HMAC secret for webhook signature verification. Returned only once — on creation or rotation.

Example response

{
  "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.