capabilities.work

Rotate a Trigger Webhook Signing Key

A 3-step recipe with Pipedream. We can help you get access.

Recipe · 3 steps

Rotate a Trigger Webhook Signing Key

with Pipedream · Webhook & Event Subscription Management

Regenerate and verify a deployed trigger webhook's signing key.

  1. Retrieve the trigger webhook to capture its current signing key before rotation.
  2. Regenerate the signing key for the webhook so prior keys can no longer verify incoming events.
  3. Read the webhook back to confirm a new signing key is in place after the rotation.
What you'll need to have ready
  • projectId: The project ID, which starts with proj_.
  • environment: The Connect environment (development or production).
  • externalUserId: The end user identifier who owns the deployed trigger.
  • triggerId: The deployed trigger ID the webhook belongs to.
  • webhookId: The webhook ID whose signing key is rotated.
For your developer

Arazzo workflow pipedream:rotate-trigger-webhook-key, 3 operations: retrieveDeployedTriggerWebhook → regenerateDeployedTriggerWebhookSigningKey → retrieveDeployedTriggerWebhook. Specs on APIs.io.