Skip to content

Validate webhook signature

Each webhook call generated from TelliSIM includes a unique signature header to validate call authenticity.

The webhook contains a header x-tellisim-signature which identifies the call signature for each user.

To validate the signature, you can use the official npm library:

  • @tellisim/webhook-signature-validator
    https://www.npmjs.com/package/@tellisim/webhook-signature-validator

Basic usage:

import * as tellisimSignatureValidator from '@tellisim/webhook-signature-validator';

tellisimSignatureValidator.validate(signature, signingKey, webhookDataObject);
Field typeDescription
signatureThe header received in x-tellisim-signature field.
signingKeyThe signing key configured for your webhooks.
webhookDataObjectThe JSON payload received in the webhook call.