📚 Docs

🔔 Webhooks

Receive real-time notifications about important AppVerse events directly in your backend.

Example Payload

A sample webhook event sent to your endpoint when a user is created:

POST /webhooks HTTP/1.1
Host: yourapp.com
Content-Type: application/json
x-appverse-signature: t=1731276211,v1=6c12d4f8cdef...

{
  "event": "user.created",
  "data": {
    "id": "usr_123",
    "email": "user@appverse.tech"
  }
}

Verify Signatures

Each webhook event includes an x-appverse-signature header. You should verify this signature using your webhook secret to ensure authenticity and prevent spoofed requests.

Example Verification (Node.js)

import crypto from "crypto";

const secret = process.env.APPVERSE_WEBHOOK_SECRET;
const signature = req.headers["x-appverse-signature"];
const payload = JSON.stringify(req.body);

const hash = crypto
  .createHmac("sha256", secret)
  .update(payload)
  .digest("hex");

if (hash === signature) {
  console.log("✅ Verified webhook!");
} else {
  console.error("❌ Invalid signature");
}

💡 Tip: Webhooks are retried up to 3 times if your endpoint doesn’t respond with a 2xx status.