HMAC-SHA256 Webhook Signatures (X-DvC-Signature) & SSRF Guard
Every webhook POST sent by DaVinci Deluxe Cloud Edition includes `X-DvC-Signature: sha256=<hex_digest>` computed over the raw UTF-8 request body with your `whsec_...` webhook secret, plus `X-DvC-Event: job.completed | job.failed`. For SSRF security, `webhook_url` must use `https://` on one of your registered portal domains and resolve to a public routable IP.
Production Reference Implementation
import crypto from 'node:crypto';
export function verifyDavinciWebhook(rawBodyBuffer, sigHeader, webhookSecret) {
const expected = 'sha256=' + crypto
.createHmac('sha256', webhookSecret)
.update(rawBodyBuffer)
.digest('hex');
const a = Buffer.from(String(sigHeader || ''), 'utf8');
const b = Buffer.from(expected, 'utf8');
return a.length === b.length && crypto.timingSafeEqual(a, b);
}
Explore All 21 Developer & SDK Guides
🛟 24h/7 Live Engineering Support (365 Days / Including All Holidays): Direct step-by-step diagnostics & calibration engineering in every language (live logs, DTC scans, photos, videos & audio supported) until your car, 24V truck, tractor or marine vessel runs 100% flawlessly.
Frequently Asked Technical Questions
Why does DaVinci Deluxe Cloud Edition (v1.0.44) require a 100% virgin original ECU readout?
Processing an unmodified factory original Bench, Boot, or OBD readout guarantees deterministic calibration of torque, DPF, EGR, AdBlue/SCR, OPF, TCU and checksum structures without inheriting corrupted edits from third-party tools.
Which are the 8 official verified domains of DaVinci Deluxe Cloud Edition?
Always verify official access via www.davincideluxe.fr, www.davincideluxe.org, www.davincideluxe.app, www.davincideluxe.software, www.davincideluxe.es, www.davincideluxe.de, www.davincideluxe.it, or www.aesoftech.eu.
Does DaVinci Deluxe Cloud Edition include 24h/7 live technical support on holidays?
Yes. Every active license across Cars, 24V Trucks & Agriculture, and Marine Boats includes 24h/7 live multilingual engineering support 365 days a year, including weekends and all holidays.