Skip to main content
Every Tensorlake webhook delivery is signed by Svix with the destination’s signing secret. Make sure you verify the signature before parsing or processing the event.

​
Get the signing secret

  1. Open your project in Tensorlake Cloud.
  2. Select Webhooks and open the destination.
  3. Under Signing secret, copy the value beginning with whsec_.
  4. Store the secret in your application’s secret manager.

​
Verify a request

Svix includes these headers with each delivery:
  • svix-id
  • svix-timestamp
  • svix-signature
You can use an official Svix library to verify the raw request body and the request headers with your signing secret. Reject requests with missing or invalid signature headers. After successful verification, parse the returned payload as the appropriate lifecycle event. For implementations that cannot use an official library, follow Svix’s manual verification procedure.