# envelope.declined

> The ByDomu envelope.declined event (Signature declined): when it fires, how to subscribe, its fields and the payload delivered by webhook.


Signature declined

Object · envelope Instant

## When it fires

A signer declined to sign.

Instantly, when it happens in ByDomu: from the app, the API, Noa, an automation or an integration. `actor.kind` tells you who: USER, NOA, SYSTEM, API, AUTOMATION or INTEGRATION.

## Subscribe with

- `envelope.declined` Only this event
- `envelope.*` Every event of Document to sign
- `*` The whole catalog

## Fields it carries

paths for filters and templates

`envelope.id` Document id

`envelope.title` Document title

`envelope.status` Signature status

`envelope.dealId` Opportunity

`envelope.contactId` Contact

`envelope.signerName` Signer name

`envelope.signerEmail` Signer email

Up to 5 attempts (0 s, 5 s, 30 s, 2 min and 10 min) on network errors, 429 or 5xx. Reply 2xx in under 10 s.

Payload:

```
{
  "event": "envelope.declined",
  "id": "5f3a0c1e-7d2b-4f7e-9a51-0b6c1d2e3f40",
  "type": "envelope.declined",
  "timestamp": "2026-09-22T14:30:00.000Z",
  "organizationId": "clx1org001",
  "actor": {
    "kind": "SYSTEM",
    "userId": null
  },
  "data": {
    "envelope": {
      "id": "clx1env001",
      "title": "Promesa de compraventa · Apartamento Chapinero Alto",
      "status": "DECLINED",
      "dealId": "clx1deal001",
      "signerName": "Laura Restrepo",
      "signerEmail": "laura.restrepo@example.com",
      "recipients": [
        {
          "name": "Laura Restrepo",
          "email": "laura.restrepo@example.com",
          "status": "NOTIFIED"
        },
        {
          "name": "Jorge Salazar",
          "email": "jorge.salazar@example.com",
          "status": "PENDING"
        }
      ],
      "expiresAt": "2026-10-06T14:30:00.000Z",
      "completedAt": null,
      "createdAt": "2026-09-22T14:30:00.000Z"
    }
  }
}
```

Headers:

```
X-Domu-Event: envelope.declined
X-Domu-Signature: t=1790610130,v1=9c1e…
User-Agent: Domu-Webhooks/2
```

Verify signature:

```
import { createHmac, timingSafeEqual } from "node:crypto";

// header = X-Domu-Signature: t=<timestamp>,v1=<hmac>
function verifyWebhook(rawBody, header, secret, toleranceSec = 300) {
  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  const timestamp = Number(parts.t);
  if (!timestamp || !parts.v1) return false;
  if (Math.abs(Date.now() / 1000 - timestamp) > toleranceSec) return false;
  const expected = createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");
  const a = Buffer.from(expected);
  const b = Buffer.from(parts.v1);
  return a.length === b.length && timingSafeEqual(a, b);
}
```

**Get it with your test data** GET /v1/webhooks/sample/envelope.declined

[Try it](https://developers.bydomu.com/en/referencia/get-webhook-sample?probar=1&type=envelope.declined)