Generates a new signing secret for the endpoint. The previous secret remains valid until previousSecretExpiresInSec elapses (default 24h, max 30 days). During the grace window deliveries are signed with both secrets so receivers can migrate without downtime. Returns the new secret — this is the only time it is shown in plaintext.
curl --request POST \
--url https://api.case.dev/webhooks/v1/endpoints/{id}/rotate_secret \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"previousSecretExpiresInSec": 1296000
}
'API key starting with sk_case_
How long (seconds) the old secret continues to be accepted. 0 invalidates immediately. Default: 86400 (24h).
0 <= x <= 2592000Secret rotated
Was this page helpful?
curl --request POST \
--url https://api.case.dev/webhooks/v1/endpoints/{id}/rotate_secret \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"previousSecretExpiresInSec": 1296000
}
'