AI engineering glossary · Web APIs HTTP
What is webhook signature?
Webhook signature: A value the sender computes over the webhook body with a shared secret and sends in a header, so the receiver can recompute it and confirm the message is genuine and unchanged. Checking it stops attackers from posting fake events to your URL.
Webhook signature: an example
A receiver computes HMAC-SHA256 of the raw body with its secret and compares it with the X-Signature header.
Related terms
More Web APIs HTTP terms
- WebSocket
- 200 OK
- 201 Created
- 204 No Content
- 304 Not Modified
- 400 Bad Request
- 401 Unauthorized
- 403 Forbidden
Where you learn it
Webhook signature is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.