Webhooks
Register webhook
Registers or updates the callback URL that receives issuance results and other events.
/openapi/v1/webhooksRequires the token, timestamp and sign signature headers, see Authentication.
One callback configuration per application: webHookId is the application identifier and calling again overwrites the configuration. Registration automatically subscribes to the result events (authorized / denied). Calling the registration again also restores delivery after the consecutive-failure circuit breaker trips.
Parameters
Request body
idstringrequired for updateThe
webHookIdreturned on creation; omit to create, include to update (must belong to this application).uristringrequiredPublic https/http URL that receives callbacks.
Example:https://webhook.site/816497e5-0b0e-42a5-abdf-d9040232bf9ccontentTypestringrequiredOnly
application/jsonis supported at present.Values:application/jsontokenstringrequiredVerification token of your choosing; sent back verbatim in the
tokenrequest header of every callback so your receiver can verify the origin.
Responses
Configuration saved.
webHookIdstringConfiguration identifier (equal to the application identifier). Send it as
idto update.
Errors
| Code | HTTP | |
|---|---|---|
| 10009033 | 400 | Invalid registration: |
| 10001001 | 400 | Request field validation failed (one entry per field). |
Callback delivery
The platform POSTs to uri with the token header (the value you registered) plus the signature header X-Tffiscal-Signature (HMAC-SHA256 keyed by app_secret), which you may verify optionally. An HTTP 2xx from your receiver counts as delivered; anything else is retried with backoff. The payload shapes of every event are described in Webhooks.
