Skip to main content
Question

Webhook message verification

  • Nov 26, 2025 8:15 AM UTC
  • 2 replies
  • 376 views

Forum|alt.badge.img

Hi there,

does RevenueCat provide a webhook message (body) signing mechanism?
Like described here: https://hookdeck.com/webhooks/guides/webhooks-security-checklist#verify-the-message

Or is the authorization header the only way?
 

This post has been closed for comments

2 replies

wes_clark
RevenueCat Staff
Forum|alt.badge.img+6
  • RevenueCat Staff
  • Nov 26, 2025 9:50 PM UTC

Hi! Currently, the authorization header is the only way in terms of our Webhook integration. 


Forum|alt.badge.img
  • Author
  • New Member
  • Nov 27, 2025 6:48 AM UTC

Yes we already know this, but how can we ensure, the payload is not manipulated? So there is no payload/body signing available.