Clous Webhook Integration
Use webhooks for asynchronous platform events and status updates.
Workflow
- Discover events with
GET /v1/webhooks/events/. - Create subscriptions with the minimum event set required.
- Store endpoint secret in a secret manager.
- Verify signatures before processing.
- Use event IDs for idempotency.
- Return 2xx only after durable receipt or safe enqueue.
Receiver Rules
- Reject old timestamps.
- Compare signatures with constant-time comparison.
- Do not retry non-idempotent downstream operations without a dedupe key.