SHA-256 HMAC Verification

Cryptography • Section 2.5

Cryptographically authenticate incoming webhook payloads to verify origin authenticity and prevent spoofing.

Signing secret with reveal and rotate.

Cryptographic HMAC Signature

Stylchat signs every outgoing webhook payload using your private HMAC secret.

X-Stylchat-Signature Cryptographic Validation

Stylchat signs every outgoing webhook payload using your private HMAC secret. The signature is attached in the X-Stylchat-Signature request header, allowing your backend to verify payload integrity before processing.