alecpope

[wise merlin]

Hi
You need to use the webhook secret in your API in order to verify the webhook event signature

I'm not sure I understand the link with manual or automatic update ?

[coral jungle]

I think I read that the secret will be invalidated every X days. So it is required to create/renew the secret, right?

[wise merlin]

I think I read that the secret will be invalidated every X days.
Where did you see this ?

[coral jungle]

Oh I think I mixed it up with Restricted API keys for Connect Accounts? So, when I start my API and give it a webhook secret, I don't need to update it no matter what?

[wise merlin]

yes you can simply use it store it in your API

[coral jungle]

Okay, great, thanks!