Get the webhook signing secret
Returns the per-environment HMAC signing secret used to sign webhook deliveries. The secret is minted automatically on the first activation of a webhook-bearing config version and is stable across subsequent activations.
Verify a delivery by computing
HMAC-SHA256(secret, "{t}.{rawBody}") and comparing the hex digest to the
v1 value in the portal-signature header (t=<unix-seconds>,v1=<hex>).
Responses
- application/json
- application/json
- application/json
- application/json
Request Example for get/v1/webhooks/secret
curl https://api.useportal.co/v1/webhooks/secret \
--header 'Authorization: Bearer YOUR_SECRET_TOKEN'
{
"secret": "string"
}