Rotar el secreto

from compense_gateway.webhooks import verify_webhook

event = verify_webhook(crudo, headers, secret=[SECRETO_NUEVO, SECRETO_VIEJO])

import { verifyWebhook } from "@compense/sdk/webhooks";

const event = verifyWebhook(req.body, req.headers, [secretoNuevo, secretoViejo]);

use Compense\Sdk\Webhook\Webhook;

$event = Webhook::verify($request->getContent(), $request->headers->all(), [$secretoNuevo, $secretoViejo]);

using Compense.Sdk.Webhooks;

WebhookEvent evt = CompenseWebhooks.Verify(crudo, request.Headers, new[] { secretoNuevo, secretoViejo });
// También: WebhookSecrets.Of(secretoNuevo, secretoViejo)

ev, err := webhook.Verify(crudo, r.Header, []string{secretoNuevo, secretoViejo})

# Sin SDK: calcula el HMAC con cada secreto y acepta si alguno coincide.
for S in "$SECRETO_NUEVO" "$SECRETO_VIEJO"; do
  [ "sha256=$(openssl dgst -sha256 -hmac "$S" < cuerpo.json | sed 's/^.* //')" = "$RECIBIDA" ] && echo "válida"
done

import os
from compense_gateway import CompenseClient

client = CompenseClient(api_key=os.environ["COMPENSE_API_KEY"], environment="sandbox")

tx = client.webhooks.endpoints.rotate_secret(
    "3f1a2b3c-0000-4a1b-9c2d-000000000001",
    idempotency_key="nova-wh-erp-001-rota-2026-11",
)
nuevo = tx.data["secret"]          # una sola vez: guárdalo YA como "vigente"
print(tx.data["id"], tx.data["rotated_at"])

import { CompenseClient } from "@compense/sdk";

const client = new CompenseClient({ apiKey: process.env.COMPENSE_API_KEY!, environment: "sandbox" });

const tx = await client.webhooks.endpoints.rotateSecret("3f1a2b3c-0000-4a1b-9c2d-000000000001", {
  idempotencyKey: "nova-wh-erp-001-rota-2026-11",
});
const nuevo = String(tx.data.secret); // una sola vez: guárdalo YA como "vigente"
console.log(tx.data.id, tx.data.rotated_at);

<?php
require __DIR__ . '/vendor/autoload.php';

use Compense\Sdk\CompenseClient;

$client = new CompenseClient(apiKey: getenv('COMPENSE_API_KEY'), environment: 'sandbox');

$tx = $client->webhooks->endpoints->rotateSecret(
    '3f1a2b3c-0000-4a1b-9c2d-000000000001',
    idempotencyKey: 'nova-wh-erp-001-rota-2026-11',
);
$nuevo = $tx->data['secret'];      // una sola vez: guárdalo YA como "vigente"
echo $tx->data['id'], ' ', $tx->data['rotated_at'], PHP_EOL;

using Compense.Sdk;
using Compense.Sdk.Models;

using var client = new CompenseClient(
    Environment.GetEnvironmentVariable("COMPENSE_API_KEY")!, CompenseEnvironment.Sandbox);

Transaction tx = await client.Webhooks.Endpoints.RotateSecretAsync(
    "3f1a2b3c-0000-4a1b-9c2d-000000000001",
    idempotencyKey: "nova-wh-erp-001-rota-2026-11");
string nuevo = tx.Data["secret"]!.GetValue<string>(); // una sola vez: guárdalo YA como "vigente"
Console.WriteLine($"{tx.Data["id"]} {tx.Data["rotated_at"]}");

package main

import (
	"context"
	"fmt"
	"log"
	"os"

	compense "github.com/Appiasoft/compense-saas-sdk-go"
)

func main() {
	ctx := context.Background()
	client, err := compense.NewClient(os.Getenv("COMPENSE_API_KEY"),
		compense.WithEnvironment(compense.Sandbox))
	if err != nil {
		log.Fatal(err)
	}

	tx, err := client.Webhooks.Endpoints.RotateSecret(ctx, "3f1a2b3c-0000-4a1b-9c2d-000000000001",
		compense.WithIdempotencyKey("nova-wh-erp-001-rota-2026-11"))
	if err != nil {
		log.Fatal(err)
	}
	nuevo, _ := tx.Data["secret"].(string) // una sola vez: guárdalo YA como "vigente"
	_ = nuevo
	fmt.Println(tx.Data["id"], tx.Data["rotated_at"])
}

curl -X POST https://sandbox.dev.compense.co/gw/v1/gateway/webhooks/endpoints/$ENDPOINT_ID/rotate-secret/ \
  -H "X-API-Key: $COMPENSE_API_KEY" \
  -H "Idempotency-Key: nova-wh-erp-001-rota-2026-11"