Rotate my Webhook Secret
Last updated
Last updated
KORE signs every event it sends with the current Active
secret key, which there is only ever one of. Rotating a secret allows you to invalidate your old one and have KORE use a new one to sign. You may want to do this because you lost your old secret or your old secret was compromised.
If you wish to rotate your secret, you can create a new secret and mark it as Active
.
First, navigate to the Webhook dashboard and click Create to create a new secret.
This will create a secret with Pending
status.
The first secret you create will be created in an Active
state.
Any new secret created afterwards will bePending
, which you can mark as Active
when ready.
Any additional secrets created will overwrite the previous Pending
secret, if one exists.
To rotate the current Active
secret, click on the Activate button. This will disable the current Active
secret and mark the Pending
secret as Active
.
Rotating a secret cannot be undone.
When rotating, ensure you are prepared to receive the new Active
secret in your implementation. Otherwise, all validations will begin to fail, as KORE will no longer be using old secrets.