Rotate Webhook Secret

POST /v1/webhooks/{webhook_id}/rotate-secret generates a new signing secret and invalidates the previous one. Rotate the secret if it may have been exposed, or as part of your regular credential rotation process.

Plan the receiver update carefully. After rotation, your application should use the new secret for webhook verification. See Create a Webhook for the signature verification pattern, including a Python code example.

Request

Replace the example webhook ID with the subscription whose secret you want to rotate.

export SCRAPER_API_BASE_URL="https://scraper.geonode.io"
export GEONODE_SCRAPER_API_KEY="YOUR_API_KEY"

curl -X POST "$SCRAPER_API_BASE_URL/v1/webhooks/2a936d3b-5a5d-47a0-b68d-5df0d8b8327c/rotate-secret" \
  -H "X-Api-Key: $GEONODE_SCRAPER_API_KEY"

Response

The response contains the new secret. Store it securely.

{
  "secret": "whsec_new_example"
}