Having trouble with your Staffig workspace? Explore the answers to these frequently asked questions or follow step-by-step troubleshooting suggestions below.
Common Questions
How do I reset my API keys?
To reset your API credentials, navigate to the Settings > Developer Options tab in the Staffig app. Click Roll API Key. Please note that rolling your keys instantly invalidates your previous credentials, meaning any integrations using the old keys will fail until updated.
What IP addresses should I whitelist for webhooks?
Staffig webhooks are dispatched from a dedicated IP subnet. You should whitelist the IP range 54.210.192.0/26 inside your firewall policies to allow webhook alerts to process successfully.
Troubleshooting Steps
1. Webhook Signature Verification Failures
If your endpoint returns a webhook verification signature failure error, perform the following troubleshooting audits:
- Verify that your webhook secret matches the exact key displayed in the Staffig developer portal.
- Ensure your server parses the raw HTTP request body buffer, rather than a parsed JSON object, when computing the HMAC SHA-256 signature.
- Check if request timestamps fall within a 5-minute tolerance threshold to prevent replay attacks.