Skip to main content

POST /api/webhooks/auth

Receives Privy webhook events. This endpoint expects an HMAC signature in x-privy-signature.
curl -X POST "https://0.finance/api/webhooks/auth" \
  -H "x-privy-signature: <hex_signature>" \
  -H "Content-Type: application/json" \
  -d '{"type":"user.created","data":{"email":"[email protected]"}}'
{
  "received": true
}
The signature is verified against PRIVY_WEBHOOK_SECRET.