Get a signed request at your own endpoint when an article is published or updated.
Publish and update events fire today.
An HMAC SHA256 signature covers the timestamp and body.
Every attempt is recorded, with one retry on failure.
Private network addresses are refused.
On the brand, or through the API. Copy the secret when shown.
Check x-searchfit-signature against your secret.
Each publish or update sends a request.
content.published and content.updated. Other events are listed but do not fire yet.
SearchFIT tries twice, waits up to 10 seconds each time, and logs every attempt.
Compute HMAC SHA256 over the timestamp, a dot and the raw body with your secret, then compare it to x-searchfit-signature.