Resource Center

Learn Signrrett through guided sections.

Guides for projects, resources, signing and your workspace. Choose a topic, follow the steps and open the related product area.

Learning path

From first upload to advanced workflows

1Upload and send a document
2Use Smart Review before sending
3Manage vendors and approvals
4Set up Project Portfolio & Resource Management

Enterprise API and Webhooks

Verify webhook signatures

Webhook payloads include timestamp and signature headers so customer systems can confirm the request came from Signrrett.

Open area

Steps to follow

  1. 1

    Read the x-signrrett-timestamp header and raw request body.

  2. 2

    Read the t timestamp and v1 signature values from x-signrrett-signature, and confirm its timestamp matches x-signrrett-timestamp.

  3. 3

    Create a string using timestamp, a period, and the unchanged raw body.

  4. 4

    Use the endpoint secret to calculate an HMAC SHA-256 signature.

  5. 5

    Compare the calculated signature to the v1 value with a timing-safe comparison.

  6. 6

    Reject webhook calls when the signature does not match or the timestamp is more than five minutes old.

Featured guides

Helpful reading for common workflows

11 guides
Still need help?

Paid users can create support tickets from the support center.

Open support