Verifying Webhook Signatures
Audience:
Technical Teams
Overview
To ensure webhook requests are legitimately sent by Pruuvn®, all incoming requests must be verified using the X-Webhook-Signature header.
Signature Details
- Algorithm: HMAC SHA-256
- Input: Raw request body
- Secret: Your webhook Signature Key
Supported Example Languages
Pruuvn® provides verification examples in:
- Ruby
- JavaScript
- Python
Why Verification Matters
- Prevents spoofed requests
- Ensures payload integrity
- Protects downstream systems
