REAL-TIME NOTIFICATIONSOutgoing Webhook Engine

Outgoing Webhooks & HMAC Verification

Softymize dispatches HTTP POST notifications to your server whenever a customer responds to a WhatsApp message, clicks a flow button, or updates an order status.

Cryptographic HMAC-SHA256 Signature

Every webhook payload is cryptographically signed using your secret key to ensure authenticity.

Incoming Webhook HeaderHTTP

X-Softymize-Signature: sha256=a1b2c3d4e5f6g7h8i9j0...

Node.js Verification Snippet

HMAC Signature VerificationNode.js

const crypto = require('crypto');
function verifyWebhookSignature(payload, signatureHeader, secret) {
  const hmac = crypto.createHmac('sha256', secret);
  const digest = 'sha256=' + hmac.update(payload).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signatureHeader), Buffer.from(digest));
}

← POST /api/v1/events Reference SDKs & Integration Guides →