feat(webhooks): add signing secret rotation endpoint

Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    resend (1.14.0)
+    resend (1.15.0)
       base64
       httparty (>= 0.22.0)
 

examples/webhooks.rb

@@ -35,6 +35,11 @@
 updated_webhook = Resend::Webhooks.update(update_params)
 puts "\nUpdated webhook: #{updated_webhook[:id]}"
 
+# Rotate the webhook signing secret
+rotated_webhook = Resend::Webhooks.rotate_signing_secret(webhook[:id])
+puts "\nRotated signing secret for webhook: #{rotated_webhook[:id]}"
+puts "New signing secret: #{rotated_webhook[:signing_secret]}"
+
 # List all webhooks
 webhooks = Resend::Webhooks.list
 puts "\nTotal webhooks: #{webhooks[:data].length}"

lib/resend/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Resend
-  VERSION = "1.14.0"
+  VERSION = "1.15.0"
 end

lib/resend/webhooks.rb

@@ -182,6 +182,21 @@ def update(params = {})
         Resend::Request.new(path, params, "patch").perform
       end
 
+      # Rotate the signing secret of a webhook
+      #
+      # Generates a new signing secret for the webhook. The previous secret keeps working for 24 hours.
+      #
+      # @param webhook_id [String] The webhook ID
+      #
+      # @return [Hash] The webhook object containing id, object type, and the new signing_secret
+      #
+      # @example
+      #   Resend::Webhooks.rotate_signing_secret("4dd369bc-aa82-4ff3-97de-514ae3000ee0")
+      def rotate_signing_secret(webhook_id)
+        path = "webhooks/#{webhook_id}/signing-secret/rotate"
+        Resend::Request.new(path, {}, "post").perform
+      end
+
       # Remove an existing webhook
       #
       # @param webhook_id [String] The webhook ID

spec/webhooks_spec.rb

@@ -118,6 +118,27 @@
     end
   end
 
+  describe "rotate_signing_secret" do
+    it "rotates the webhook signing secret" do
+      resp = {
+        "object": "webhook",
+        "id": "4dd369bc-aa82-4ff3-97de-514ae3000ee0",
+        "signing_secret": "whsec_yyyyyyyyyy"
+      }
+      request = instance_double(Resend::Request)
+      expect(Resend::Request).to receive(:new)
+        .with("webhooks/4dd369bc-aa82-4ff3-97de-514ae3000ee0/signing-secret/rotate", {}, "post")
+        .and_return(request)
+      expect(request).to receive(:perform).and_return(resp)
+
+      result = Resend::Webhooks.rotate_signing_secret("4dd369bc-aa82-4ff3-97de-514ae3000ee0")
+
+      expect(result[:object]).to eql("webhook")
+      expect(result[:id]).to eql("4dd369bc-aa82-4ff3-97de-514ae3000ee0")
+      expect(result[:signing_secret]).to eql("whsec_yyyyyyyyyy")
+    end
+  end
+
   describe "list_event_attempts" do
     it "lists webhook event attempts with pagination" do
       request = instance_double(Resend::Request)