17 lines
451 B
Markdown

# 07 Webhooks
Webhook design goals:
- Multi-merchant event routing
- Idempotent processing
- Retry-safe handlers
- Event logging and replay support
- Signature verification (`X-Uber-Signature` HMAC SHA256 with client secret)
Current ingestion endpoint: `POST /api/v1/webhooks/uber`
Acknowledgement behavior:
- Valid webhook events are acknowledged with `200` and empty body
- Duplicate retries are de-duplicated and still acknowledged with `200`