Get Webhook Secret
Return the authenticated developer’s webhook signing secret.
This is the per-developer HMAC key used to sign the X-Phota-Signature
header on async job callbacks; partners fetch it once to verify callback
authenticity. The secret is minted lazily on first use. Scoped strictly to
the authenticated developer (the API key yields the developer uid).
Authorizations
Response
Successful Response
The authenticated developer's webhook signing secret (GET .../webhook-secret).
The same per-developer secret used to HMAC-sign the X-Phota-Signature
header on async job callbacks. Use it to verify a callback's authenticity:
recompute sha256 HMAC over the exact received body and compare.
Per-developer HMAC key for verifying the X-Phota-Signature on job callbacks.
