How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Subtle changes in how payloads are sent broke signature verification for consumers verifying incorrectly

calendar_today April 9, 2023 domain svix

Apr 9 , 11:00 UTC Resolved - We changed the code to send the payload exactly the same way as it’s sent to us (before, we were compacting it before sending). This meant that people that relied on the payload to be compact in order to verify webhooks (i.e they were verifying incorrectly) had verification failing. We reverted this immediately once it was reported signatures were failing for customers.

open_in_new Read original post