feat(webhooks): add signing secret rotation endpoint

Merged
GA
2mo ago
+59-8

Adds WebhookSvc::rotate_signing_secret for POST /webhooks/{webhook_id}/signing-secret/rotate, next to replay_event, plus the RotateWebhookSigningSecretResponse type re-exported from resend_rs::types. The response is the same shape as create webhook: the webhook id and the new whsec_ secret; the old secret stops verifying as soon as the call returns. Offered for the maintainer's review, no version bump and no CHANGELOG entry, matching #107.

let rotated = resend
    .webhooks
    .rotate_signing_secret("4dd369bc-aa82-4ff3-97de-514ae3000ee0")
    .await?;
println!("{}", rotated.signing_secret);

No live call was made against the endpoint (write endpoint, no key configured), so the response shape is taken from the spec PR.

Spec PR: https://github.com/resend/resend-openapi/pull/113
Linear: https://linear.app/resend/issue/DEV-2078

šŸ¤– Generated with Claude Code

Summary by cubic

Adds WebhookSvc::rotate_signing_secret for POST /webhooks/{webhook_id}/signing-secret/rotate, returning a RotateWebhookSigningSecretResponse with the webhook id and new whsec_ secret; the old secret stays valid for 24 hours.

  • Response shape is taken from the spec PR since no live call was made.
  • Bumps version to 0.32.2 with a CHANGELOG entry under webhook::rotate_signing_secret.