Enable verification and set the signing secret

Set the PROVIDER's own secret (Stripe's whsec_..., GitHub's configured secret). A platform-generated secret can only verify traffic we signed ourselves. The scheme is detected from the header's shape, so there is no algorithm to configure.

patch/v1/endpoints/{id}/auth-config

Request

  • Base URL: https://webhook-studio.com
  • URL: https://webhook-studio.com/v1/endpoints/{id}/auth-config
  • Auth: HTTP bearer

Request body

hmac_enabledboolean
secretstring
header_namestring
tolerance_secondsinteger
on_failure'reject' | 'accept_log'
log_blocked_ipsboolean

Response

OK

Changes

No recorded changes to this operation across all 1 revision of this API.