Secret handling notes
- Signing secrets are generated at subscription creation
- Secrets are stored in Supabase Vault
- Subscription rows store only the Vault UUID reference
- Secret regeneration immediately invalidates the previous secret
Security
HTTPS Enforcement
Endpoint URL requirements for Spark360 webhook subscriptions.
Spark360 requires HTTPS webhook endpoints and rejects insecure URLs at create and edit time.
Was this page helpful?