improved
Webhook Signature Verification Enhancements
over 3 years ago by [email protected]
We simplified the signature algorithm used in webhook verification to reduce cross-language inconsistencies. See Webhooks: Verifying Pinwheel is the Sender for implementation details. Additionally, we moved webhook event IDs from the header into the request body, increasing the signature's entropy.
- The header
x-pinwheel-webhook-id
has been removed. It's now available asevent_id
in the request body. - The request body parameter
webhook_id
has been removed. It's now available as the headerx-pinwheel-webhook-id
.