Skip to main content

2 posts tagged with "proof"

View All Tags

Check the token or trust the call: verifying signature webhooks

· 4 min read
Julien Jenoudet
CEO of IgniSign

Your product has a new flow: a user signs a mandate inside your app, and the moment the signature is done your backend activates the account, releases the file or moves the deal forward. That moment arrives as a webhook. The decision every integrating developer faces is simple to state: does your handler act on any call that reaches the endpoint, or does it first confirm that the call really came from IgniSign?

Copy or reference: where your product keeps the signature proof

· 4 min read
Julien Jenoudet
CEO of IgniSign

When a signature request completes, your product has a new thing to look after: the proof. One day an auditor, a customer or your own support team will ask for it, often months after the signer finished. So the integrating developer has to decide early how the backend treats that proof: copy it into your own storage as soon as the signature is done, or keep a reference and fetch it from IgniSign when someone asks. This post is about that choice.