Webhooks following Standard Webhooks

Every webhook now carries the headers webhook-id, webhook-timestamp and webhook-signature. X-Signature-256 stays.

LIVCK now generates the secret and shows it to you once. Webhooks without a secret get one automatically. When you renew it, the old one keeps signing webhook-signature for 24 hours. X-Signature-256 switches right away.

Open integrations

Every delivery shows its event ID and, on failure, the reason, such as timeout or DNS. Retries carry the same ID, so you can spot duplicate deliveries. Webhooks of your subscribers are now retried on failure too.

A webhook now only counts as delivered when your endpoint answers with 2xx. Until now a redirect counted too, although your endpoint never got anything. We no longer follow redirects. If your endpoint redirects, enter the target address directly.

Test now sends a signed sample alert in the real format. Until now it sent an unsigned message that receivers checking the signature rejected.