Skip to main content
POST
Test webhook signature verification
How to test (recommended, no secrets in the docs UI)
  1. Set WEBHOOK_SECRET in your server env.
  2. Use one of the client snippets below to sign and POST a JSON payload to your webhook endpoint (or to this /webhooks/test route) with X-Webhook-Signature: t=<ts>,v1=<base64sig>.
  3. Expect 200 with Webhook received and verified.
The signature is computed as base64(HMAC_SHA256(secret, ts.{ts}.)) with a ±5 minute tolerance.
Try It: Avoid entering secrets in the public Try It UI; run the snippet locally instead.

Headers

X-Webhook-Signature
string
required

Signature header in the format t=<unix_ts>,v1=<base64sig>.

X-Webhook-Event
string

Event type (e.g., order.settled).

X-Webhook-Id
string

Unique request id for idempotency/debugging.

Body

application/json

The body is of type object.

Response

Verified

status
string
Example:

"success"

message
string
Example:

"Webhook received and verified"

data
object