Webhooks

Verifying Signatures

NetSendo signs every webhook request using HMAC-SHA256. You should verify this signature to ensure the request came from us.

const crypto = require('crypto');

function verifySignature(payload, signature, secret) {
  const hmac = crypto.createHmac('sha256', secret);
  const digest = hmac.update(payload).digest('hex');
  return signature === digest;
}

Event Types

• subscriber.created
  Fired when a new subscriber joins a list.
• subscriber.unsubscribed
  Fired when a subscriber opts out.

Failed deliveries

Each event is delivered once. If your endpoint does not answer with a 2xx status or cannot be reached, the attempt is logged as failed in the webhook's delivery log and is not sent again, so make your endpoint quick and highly available. After 10 consecutive failures the webhook is deactivated automatically; re-enable it in the webhook settings once the endpoint works again.