Resource Center

Learn Signrrett through guided sections.

Choose a topic, follow the steps, and open the related product area when you are ready.

Learning path

From first upload to advanced workflows

1Upload and send a document
2Use Smart Review before sending
3Manage vendors and approvals
4Configure Enterprise integrations

Enterprise API and Webhooks

Verify webhook signatures

Webhook payloads include timestamp and signature headers so customer systems can confirm the request came from Signrrett.

Open area

Steps to follow

  1. 1

    Read the x-signrrett-timestamp header and raw request body.

  2. 2

    Read the t timestamp and v1 signature values from x-signrrett-signature, and confirm its timestamp matches x-signrrett-timestamp.

  3. 3

    Create a string using timestamp, a period, and the unchanged raw body.

  4. 4

    Use the endpoint secret to calculate an HMAC SHA-256 signature.

  5. 5

    Compare the calculated signature to the v1 value with a timing-safe comparison.

  6. 6

    Reject webhook calls when the signature does not match or the timestamp is more than five minutes old.

Featured guides

Helpful reading for common workflows

11 guides
Still need help?

Paid users can create support tickets from the support center.

Open support