Rotate the signing secret
POST/v1/webhooks/:id/rotate-secret
Returns the new secret only in this response; the previous one keeps signing for 24h (an idempotency replay returns signing_secret: null).
Request​
Responses​
- 200
- 401
- 403
- 404
- 409
- 503
OK
INVALID_TOKEN / INVALID_AUDIENCE / INVALID_ISSUER / TOKEN_EXPIRED / TOKEN_REVOKED / MTLS_REQUIRED
INSUFFICIENT_SCOPE — the token lacks the access level (or the kadu/… resource) the operation requires; details: { required, granted }. USER_PERMISSION_DENIED — the role of the person who owns the token does not grant the operation; details: { required }. NOT_A_MEMBER — the person is not a member of the organization. FEATURE_NOT_ENABLED — the operation is not enabled for the organization; details: { permission }. UNKNOWN_ORGANIZATION — the token's org is not a Kadu organization.
NOT_FOUND
IDEMPOTENCY_KEY_REUSED / IDEMPOTENCY_REQUEST_IN_PROGRESS (or the route's CONFLICT)
AS_UNAVAILABLE — token verification is unavailable (Authorization Server down or configuration missing). Try again (Retry-After).