curl --request POST \
--url https://signsealship.com/api/partner/webhooks/{id}/rotate \
--header 'Authorization: Bearer <token>'const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://signsealship.com/api/partner/webhooks/{id}/rotate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://signsealship.com/api/partner/webhooks/{id}/rotate"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text){
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"secret": "<string>",
"signatureHeader": "<string>",
"previousSecretExpiresAt": "2023-11-07T05:31:56Z"
}{
"error": "A valid partner API key is required."
}{
"error": "<string>"
}Rotate a signing secret
Reissue the subscription’s signing secret. The new secret is returned exactly once — only its hash is stored. For 24 hours deliveries are signed with both the old and the new secret (one v1 entry each in the SignSealShip-Signature header), so your endpoint can cut over without dropping verification; after the overlap the old secret stops signing. Accepts the partner API key or the dashboard session cookie.
curl --request POST \
--url https://signsealship.com/api/partner/webhooks/{id}/rotate \
--header 'Authorization: Bearer <token>'const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://signsealship.com/api/partner/webhooks/{id}/rotate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://signsealship.com/api/partner/webhooks/{id}/rotate"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text){
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"secret": "<string>",
"signatureHeader": "<string>",
"previousSecretExpiresAt": "2023-11-07T05:31:56Z"
}{
"error": "A valid partner API key is required."
}{
"error": "<string>"
}Authorizations
Partner API key. Send as Authorization: Bearer sss_pk_....
Path Parameters
The subscription id.
Response
New secret issued — shown exactly once.
The rotated subscription id.
The new signing secret, prefixed sss_whsec_. Shown exactly once — only its hash is stored. Deliveries are signed with both the old and the new secret for 24 hours, then the old secret stops signing.
Header name carrying the HMAC signature on every delivery.
Until this instant deliveries are signed with BOTH secrets — accept either during the overlap.