Skip to main content
Question

Webhook message verification

  • November 26, 2025
  • 2 replies
  • 22 views

Forum|alt.badge.img

Hi there,

does RevenueCat provide a webhook message (body) signing mechanism?
Like described here: https://hookdeck.com/webhooks/guides/webhooks-security-checklist#verify-the-message

Or is the authorization header the only way?
 

2 replies

wes_clark
RevenueCat Staff
Forum|alt.badge.img+6
  • RevenueCat Staff
  • November 26, 2025

Hi! Currently, the authorization header is the only way in terms of our Webhook integration. 


Forum|alt.badge.img
  • Author
  • New Member
  • November 27, 2025

Yes we already know this, but how can we ensure, the payload is not manipulated? So there is no payload/body signing available.