get https://spark.test.woodcoreapp.com/api/v2/sign/
This resource allows you to sign any event received from Woodcore before acting or processing them.
The sign resource takes in the event ID to run a validation the event that has already been triggered, confirms if the eventId is active and returns a signature.
The expectation on how this resources should be used is as follows.
When an event is triggered form source
- Receive the webhook
- Perform a
GETto this endpoint to validate the webhook was not wrongly triggered to you - Get the
signaturefrom the response and compare with thesignatureon the header of webhook you received. If this does not match, reject!
Signing Timeline 🚨
This resource maintains a response for 5 (five minutes) after 5 minutes, this event or validation will be omitted.