Variable VICTOR_WEBHOOK_PUBLIC_KEYSConst
VICTOR_WEBHOOK_PUBLIC_KEYS: {
production: "-----BEGIN PUBLIC KEY-----\nMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBgr6xzyAvHRPwssagnmTCyVOLuri/\n1XG3vryHkYQszzQHi+GduludZKoi/sjRE6AsIIJhU3fOQSUKLht7HZfy708B6+7k\nL5QNsyLJdKR5HaFYuQkU+qGzOeLCO816nak81Ka6yQlsROscMapYCPQ6o9sJOfAX\njChLmksP2+L9z5x4E1E=\n-----END PUBLIC KEY-----";
stage: "-----BEGIN PUBLIC KEY-----\nMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBD8MOCKPG3fmsHsnl09KSTGFcDv4o\ntv7d/2J+BFR8QBBZj/jXobltxDaJnffGWT9jhquqgmVmTof+qTaAfhu49hQAuccA\nzvFRnRy56d5cBUgJR44S9rBnaHmlwX6Xj4rFrpRak8Kv3fqNi01ohdydqK1YKlCF\nTGYzzhSh2wXUZfxTnD8=\n-----END PUBLIC KEY-----";
} = ...
Type Declaration
-
Readonlyproduction: "-----BEGIN PUBLIC KEY-----\nMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBgr6xzyAvHRPwssagnmTCyVOLuri/\n1XG3vryHkYQszzQHi+GduludZKoi/sjRE6AsIIJhU3fOQSUKLht7HZfy708B6+7k\nL5QNsyLJdKR5HaFYuQkU+qGzOeLCO816nak81Ka6yQlsROscMapYCPQ6o9sJOfAX\njChLmksP2+L9z5x4E1E=\n-----END PUBLIC KEY-----"
-
Readonlystage: "-----BEGIN PUBLIC KEY-----\nMIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBD8MOCKPG3fmsHsnl09KSTGFcDv4o\ntv7d/2J+BFR8QBBZj/jXobltxDaJnffGWT9jhquqgmVmTof+qTaAfhu49hQAuccA\nzvFRnRy56d5cBUgJR44S9rBnaHmlwX6Xj4rFrpRak8Kv3fqNi01ohdydqK1YKlCF\nTGYzzhSh2wXUZfxTnD8=\n-----END PUBLIC KEY-----"
Victor's ECDSA (P-521) webhook-verification public keys.
These are verification keys, not secrets — Victor issues them per environment and every integrator holds the same values, so they live in code rather than in Doppler. Stage (
api.stage.victorfi.com) and production (api.victorfi.com) sign with different keys, so this is a keyed pair rather than a single constant; verifying a production webhook against the stage key fails closed and drops the event.