Rotate a webhook's signing secret (production)
curl --request POST \
--url https://api.bullionwale.com/api/trading/v1/webhooks/{webhook_id}/rotate-secret \
--header 'X-API-Key: <api-key>'import requests
url = "https://api.bullionwale.com/api/trading/v1/webhooks/{webhook_id}/rotate-secret"
headers = {"X-API-Key": "<api-key>"}
response = requests.post(url, headers=headers)
print(response.text){
"active": true,
"environment": "<string>",
"events": [
"<string>"
],
"id": "<string>",
"secret": "<string>",
"secret_last4": "<string>",
"url": "<string>",
"created_at": "<string>",
"description": "<string>",
"updated_at": "<string>"
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}Webhooks
Rotate a webhook's signing secret (production)
Switched off. Production trading is implemented but not available: orders are refused with 403 production_trading_disabled. Once it opens, Bullionwale enables production access per account (see Production access requirements).
Not yet available. Webhooks are implemented but switched off: these endpoints answer 404 until Bullionwale turns them on.
Replaces the signing secret at once: every delivery signed from now on, retries of earlier events included, uses the new one. The response is the only time it is shown.
Rotate a webhook's signing secret (production)
curl --request POST \
--url https://api.bullionwale.com/api/trading/v1/webhooks/{webhook_id}/rotate-secret \
--header 'X-API-Key: <api-key>'import requests
url = "https://api.bullionwale.com/api/trading/v1/webhooks/{webhook_id}/rotate-secret"
headers = {"X-API-Key": "<api-key>"}
response = requests.post(url, headers=headers)
print(response.text){
"active": true,
"environment": "<string>",
"events": [
"<string>"
],
"id": "<string>",
"secret": "<string>",
"secret_last4": "<string>",
"url": "<string>",
"created_at": "<string>",
"description": "<string>",
"updated_at": "<string>"
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}{
"detail": {
"code": "<string>",
"message": "<string>"
}
}Authorizations
Path Parameters
Response
Successful Response
test or production: the events it receives.
The signing secret (whsec_...). Shown only in this response: store it now.
The last 4 characters of the signing secret.