GuidesAPI ReferenceChangelog
Log In
Changelog
Back to All
improved

Webhook Signature Verification Enhancements

over 4 years ago by [email protected]

We simplified the signature algorithm used in webhook verification to reduce cross-language inconsistencies. See Webhooks: Verifying Pinwheel is the Sender for implementation details. Additionally, we moved webhook event IDs from the header into the request body, increasing the signature's entropy.

  • The header x-pinwheel-webhook-id has been removed. It's now available as event_id in the request body.
  • The request body parameter webhook_id has been removed. It's now available as the header x-pinwheel-webhook-id.