Skip to content

feat(webhooks): add signing secret rotation endpoint - #109

Merged
AntoniosBarotsis merged 5 commits into
mainfrom
feat/webhook-signing-secret-rotation
Sep 10, 2026
Merged

AntoniosBarotsis merged 5 commits into
mainfrom
feat/webhook-signing-secret-rotation

Conversation

@gabrielmfern

@gabrielmfern gabrielmfern commented Sep 9, 2026 •

Copy link
Copy Markdown
Member

Adds WebhookSvc::rotate_signing_secret for POST /webhooks/{webhook_id}/signing-secret/rotate, next to replay_event, plus the RotateWebhookSigningSecretResponse type re-exported from resend_rs::types. The response is the same shape as create webhook: the webhook id and the new whsec_ secret; the old secret stops verifying as soon as the call returns. Offered for the maintainer's review, no version bump and no CHANGELOG entry, matching #107.

let rotated = resend
    .webhooks
    .rotate_signing_secret("4dd369bc-aa82-4ff3-97de-514ae3000ee0")
    .await?;
println!("{}", rotated.signing_secret);

No live call was made against the endpoint (write endpoint, no key configured), so the response shape is taken from the spec PR.

Spec PR: resend/resend-openapi#113
Linear: https://linear.app/resend/issue/DEV-2078

🤖 Generated with Claude Code


Summary by cubic

Adds WebhookSvc::rotate_signing_secret for POST /webhooks/{webhook_id}/signing-secret/rotate, returning a RotateWebhookSigningSecretResponse with the webhook id and new whsec_ secret; the old secret stays valid for 24 hours.

  • Response shape is taken from the spec PR since no live call was made.
  • Bumps version to 0.32.2 with a CHANGELOG entry under webhook::rotate_signing_secret.

Written for commit f98356b. Summary will update on new commits.

Review in cubic

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 2 files

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread src/webhooks.rs Resolved
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 2 files (changes from recent commits).

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread CHANGELOG.md Resolved
Comment thread src/webhooks.rs Resolved
…ing secret

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 1 file (changes from recent commits).

Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic

Comment thread src/webhooks.rs Resolved

@cubic-dev-ai cubic-dev-ai Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 2 files (changes from recent commits).

Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic

Comment thread CHANGELOG.md Resolved
@AntoniosBarotsis
AntoniosBarotsis merged commit 071b8c1 into main Sep 10, 2026
1 check passed
@AntoniosBarotsis
AntoniosBarotsis deleted the feat/webhook-signing-secret-rotation branch September 10, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants