# A guide to verifying the webhook signature

- Date: 2026-10-18
- Type: New
- Surface: Developer portal and CLI
- What you need to do: Nothing.
- Address: https://developers.rivr.io/changelog/2026-10-18-verify-signatures-guide

The guide Verify the webhook signature covers both delivery paths: the callbackUrl of each order, where signing is optional, and your organisation's own endpoints, which are always signed. It has code in Node, PHP, Python and .NET (the .NET file also builds for .NET Framework), pseudocode for Delphi and 4D, and 18 test vectors to prove your own code against. The Node, PHP, Python and .NET code is run against the vectors on every change to the portal.