666 B

07 Webhooks

Webhook design goals:

  • Multi-merchant event routing
  • Idempotent processing
  • Retry-safe handlers
  • Event logging and replay support
  • Signature verification (X-Uber-Signature HMAC SHA256 with client secret)

Current ingestion endpoint: POST /api/v1/webhooks/uber

Acknowledgement behavior:

  • Valid webhook events are acknowledged with 200 and empty body
  • Duplicate retries are de-duplicated and still acknowledged with 200

Common event types handled:

  • orders.notification
  • orders.failure
  • orders.release
  • orders.scheduled.notification
  • orders.cancel
  • store.provisioned
  • store.deprovisioned
  • store.status.changed