WebhookEndpointsService_RotateSigningSecret

Staging

https://stg-gateway.invora.app

POST

/api/billing/v2/webhook-endpoints/{id}/rotate-signing-secret

Rotate the per-endpoint HMAC signing secret. Only valid for endpoints
whose signature_algo is HMAC — JWT endpoints use the shared cluster
RS256 key and have nothing per-endpoint to rotate (returns
FAILED_PRECONDITION). The returned secret is WRITE-ONCE: it is never
retrievable again after this call returns, so the caller must capture
it immediately, exactly like the secret generated on Create.

Request

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Bodyapplication/json

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://stg-gateway.invora.app/api/billing/v2/webhook-endpoints//rotate-signing-secret' \
--header 'Content-Type: application/json' \
--data '{
    "id": "string"
}'

Response Example

200 - Example 1

{
    "hmacKey": "string"
}

Modified at 2026-08-01 19:08:20

WebhookEndpointsService_RetryWebhook

PublicRegistrationService_ListAvailablePlans