Webhook Signatures
Verify webhook payloads with HMAC signatures.
Updated
On this page
Overview
Every webhook request is signed with HMAC-SHA256. Always verify signatures to prevent spoofed requests. See Verifying Signatures for implementation details.
Verification Flow
- Read the raw request body
- Read the header