Webhooks

Rotate an endpoint's secret

POSThttps://voxa.abhinavyadav.in/api/v1/webhooks/{endpoint_id}/rotate-secret

Issues a new signing secret, returned once. Deliveries are signed with it from now on.

Authorization

An API key (X-API-Key or Authorization: Bearer), or a signed-in member with the keys.manage permission.

X-API-KeyAuthorization: Bearerkeys.manage

Path parameters

endpoint_idstringrequired

The webhook endpoint's id.

Query parameters

timezonestringdefault: "Asia/Kolkata"

IANA time zone for every timestamp in the response (at, date, timestamp and *_at fields), as ISO 8601 with the offset. The X-Timezone header works too; the zone used comes back in the X-Timezone response header. An unknown zone is a 400.

Response

200Success.

See the 200 example next to the code samples.

401No credentials, or they are invalid or revoked.

detailstring

What went wrong, in plain words.

403Your role (or an API key) lacks the permission.

detailstring

What went wrong, in plain words.

422Validation Error

detailobject[]

Show item attributes

locstring | integer[]

msgstring

typestring

429Over the per-key rate limit; wait for Retry-After.

detailstring

What went wrong, in plain words.

curl --request POST \
  --url 'https://voxa.abhinavyadav.in/api/v1/webhooks/{endpoint_id}/rotate-secret?timezone=Asia/Kolkata' \
  --header 'X-API-Key: <api-key>'

import requests

url = "https://voxa.abhinavyadav.in/api/v1/webhooks/{endpoint_id}/rotate-secret"
params = {
    "timezone": "Asia/Kolkata",
}
headers = {
    "X-API-Key": "<api-key>",
}

response = requests.post(url, params=params, headers=headers)
print(response.status_code, response.json())

const response = await fetch("https://voxa.abhinavyadav.in/api/v1/webhooks/{endpoint_id}/rotate-secret?timezone=Asia/Kolkata", {
  method: "POST",
  headers: {
    "X-API-Key": "<api-key>",
  },
})
const data = await response.json()
console.log(response.status, data)

Response

{
  "secret": "whsec_9d1a…",
  "secret_hint": "whsec_…77b0"
}

{
  "detail": "sign in required"
}

{
  "detail": "your role cannot do this (keys.manage)"
}

{
  "detail": [
    {
      "type": "missing",
      "loc": [
        "body",
        "name"
      ],
      "msg": "Field required",
      "input": {}
    }
  ]
}

{
  "detail": "rate limit exceeded; slow down"
}