Saltar al contenido principal
POST
Rotate the signing secret

Autorizaciones

Authorization
string
header
requerido

A bearer JWT issued by Access Manager. The /v1 surface never reads a tenant from the body, path, or query. Machine callers obtain a token with the Access Manager client-credentials flow. The /admin surface authorizes against an operator scope and carries no tenant context.

Encabezados

X-Idempotency
string
requerido

A client-chosen unique key that makes this mutation at-most-once. A mutation sent without it is rejected before any write with 400 missing_idempotency_key. Reusing the same key with an identical request replays the original response byte-for-byte (with X-Idempotency-Replayed: true); reusing it with a different request body returns 409 idempotency_conflict. To re-drive a corrected request, mint a new key.

Parámetros de ruta

id
string<uuid>
requerido

The unique identifier of the subscription (UUIDv7).

Respuesta

A new signing secret was minted. No read route returns it; a replay of the same X-Idempotency key returns this same response.

signingSecret
string
requerido

The new webhook signing secret.

Ejemplo:

"ICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9Pj8="

overlapUntil
string<date-time>
requerido

The moment until which each webhook delivery also carries a signature made with the previous secret (UTC, RFC 3339) — a 24-hour dual-sign overlap.

Ejemplo:

"2026-06-06T12:00:00Z"