X-Gr4vy-Webhook-Timestamp
: UNIX timestamp in seconds used to generate the signature.X-Gr4vy-Webhook-Signatures
: comma-separated list of signatures for each of the active secrets.X-Gr4vy-Webhook-ID
: unique reference to webhook across retries which acts as the idempotency value.{timestamp}.{payload}
).X-Gr4vy-Webhook-ID
header is a unique reference to the webhook across any retries. For example,
you may successfully process a webhook and return response but due to network problems our system did not
receive the response. We will then retry that request and your code must know that the webhook
was already processed.
If the webhook handling is idempotent itself this might not be a real problem but still a waste of
resources. You can store the latest webhooks processed extracting the id from X-Gr4vy-Webhook-ID
to avoid processing them again.