Rotate webhook signing secret — returned once

Staging

https://fin-api.digetpay.com

POST

/v1/developer-portal/applications/{appId}/credentials/{env}/rotate-webhook-secret

Generates a new webhook signing secret for signature verification
(X-DigetPay-Signature). The raw secret is returned once.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Path Params

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST 'https://fin-api.digetpay.com/v1/developer-portal/applications//credentials//rotate-webhook-secret' \
--header 'Authorization: Bearer <token>'

Responses

🟢200OK

application/json

New webhook signing secret returned (shown once).

Bodyapplication/json

Example

{
    "environment": "SANDBOX",
    "webhookSecret": "whsec_d4c3b2a109876543210fedcba9876543",
    "note": "Store this now. It will not be shown again."
}

🟠400Bad Request

🟠401Unauthorized

Modified at 2026-09-16 09:43:02

Rotate API key — new raw key returned once

Revoke credential (`isActive=false`)