Signature verification
Every app has a unique client secret. This is a sensitive value that's shared between Canva and your app. You need this secret to verify request signatures.
To get your app's client secret:
- Navigate to an app via the Developer Portal.
- Open the Verification page.
- Under the Client secret field, click Copy.
We recommend storing client secrets as environment variables.
You should never share a client secret or commit it to source control.