Examples / Identity and security / Auth0 Log Streams

Auth0 Log Streams webhooks

Tenant logs streamed as events: logins, failures, sign-ups, token exchanges.

Events

s (success login)
f (failed login)
ss (success signup)
seacft (code exchange)

Signature

No signature. Auth0 sends the Authorization header value you set on the custom webhook stream.

✓ A bin checks Auth0 Log Streams signatures: add the the exact Authorization header value under Signature verification (Okta / Auth0 (Authorization header)).

Retries

Auth0 retries with backoff and pauses the stream after repeated failures.

See a retry schedule in the calculator.

Docs

auth0.com/docs/customize/log-streams/custom-log-streams

Checked 2026-10-08. Report a change.

Sample request from Auth0 Log Streamsillustrative, shortened

Content-Typeapplication/jsonAuthorizationBearer your-shared-token

[
  {
    "log_id": "90020260108063400123456789012345678901234567890",
    "data": {
      "date": "2026-10-08T06:34:00.000Z",
      "type": "s",
      "description": "Successful login",
      "connection": "Username-Password-Authentication",
      "client_name": "Shop web",
      "ip": "203.0.113.9",
      "user_name": "ravi@example.com"
    }
  }
]

Receive Auth0 Log Streams webhooks with webhooks.xyz

Create a bin. Paste its URL into Auth0 Log Streams. Each request shows at once with its headers and body. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in identity and security: Clerk, Okta Event Hooks, Plaid.