API change event
A pipeline delivery. Delivery is at least once and in no fixed order.
postWebhookapi-change
Headers
user-agent'SKMTC-Hub-Webhooks/1' required
Hub's webhook client; the 1 matches the v1 of the event types.
skmtc-signaturestring required
t=<unix seconds>,v1=<hex HMAC-SHA256>. The HMAC key is the webhook's whole secret as UTF-8, whsec_ prefix included; the signed content is <t>.<raw body>. Compute it from the raw body before parsing it, compare in constant time, and refuse a t more than five minutes from your clock. Each attempt signs again with a new t and the current secret.
Payload
Response
Any 2xx: the delivery succeeded. Hub does not read the body.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.