resend-cli 2.19.1 → 2.20.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -437,6 +437,7 @@ Use `all` with `--events` to subscribe to every event.
437
437
  - `get`
438
438
  - `update`
439
439
  - `delete`
440
+ - `rotate-signing-secret`
440
441
  - `listen`
441
442
  - `events` (`list`, `get`, `attempts`, `replay`)
442
443
 
@@ -472,7 +473,7 @@ resend webhooks list --after wh_abc123 --json
472
473
 
473
474
  Registers a new endpoint.
474
475
 
475
- The endpoint must use **HTTPS**. The **`signing_secret`** in the response is shown **once**. Store it immediately to verify incoming payloads.
476
+ The endpoint must use **HTTPS**. Use the **`signing_secret`** in the response to verify incoming payloads. `resend webhooks get` returns it again.
476
477
 
477
478
  In interactive mode, the CLI can prompt for endpoint and events. In non-interactive mode (pipes, CI, `--json`), **`--endpoint` and `--events` are required.**
478
479
 
@@ -498,7 +499,7 @@ resend webhooks get wh_abc123
498
499
  resend webhooks get wh_abc123 --json
499
500
  ```
500
501
 
501
- The signing secret is not returned from `get`. To rotate secrets, delete the webhook and create a new one.
502
+ The response includes the signing secret. Use `resend webhooks rotate-signing-secret <id>` to replace it.
502
503
 
503
504
  #### **`resend webhooks update`**
504
505
 
@@ -536,6 +537,17 @@ resend webhooks delete wh_abc123 --yes
536
537
 
537
538
  To pause delivery temporarily, prefer `resend webhooks update <id> --status disabled`.
538
539
 
540
+ #### **`resend webhooks rotate-signing-secret`**
541
+
542
+ Generates a new signing secret for the webhook and returns it. For 24 hours, payloads are signed with both the new and the previous secret, so either one verifies them. After that, only the new secret does.
543
+
544
+ Omit the ID in a terminal to pick from a list.
545
+
546
+ ```bash
547
+ resend webhooks rotate-signing-secret wh_abc123
548
+ resend webhooks rotate-signing-secret wh_abc123 --json
549
+ ```
550
+
539
551
  #### **`resend webhooks listen`**
540
552
 
541
553
  Built-in local development helper. It: