webhookRotate

dev.arcgate/arcgate · Verify this server

Replaces the secret a webhook channel signs pushes with. The old secret stops signing at once. - **Cost:** Free. Signed by the box's agent over method `POST`, path `/agent/v1/<address lowercased>/webhook/<id>/rotate` and no body (the hash of no bytes). Or send an `ARCGATE-KEY` of the account the box is linked to, with no signature. Another account's key, or any key for a box that is not linked, does not apply to the box: the call is checked as if no key were sent, so it needs the signature. A key nobody holds is a 401 `key_invalid`. The key keeps working after the account has lapsed (its grace has ended). - **Inputs:** `address` and `id` (path). No body. - **Returns:** the `id` and the new `secret`. The secret is shown only now: give it to the receiver. - **Errors:** - 404 `webhook_not_found`: the box has no webhook channel with that id. - **Next:** - `webhookList`: see each channel's delivery state.