Skip to main content
POST
Rotate a webhook channel's signing secret

Authorizations

Authorization
string
header
required

A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.

Path Parameters

channel_id
string<uuid>
required

Response

Successful Response

The one-time reveal of a webhook channel's signing secret.

signing_secret
string
required

The new signing secret, in Standard Webhooks form (whsec_ + base64). Shown exactly once, in this response — it is not readable afterwards. Use it to verify the signature on delivered payloads. Rotating invalidates the previous secret immediately, so deploy this value before the next alert fires.

Example:

"whsec_c2VjcmV0LWV4YW1wbGUtbm90LWEtcmVhbC1zZWNyZXQ="