Webhooks

curl -X POST https://api.robase.dev/v1/webhooks \
  -H "Authorization: Bearer rb_live_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-app.com/webhooks/robase",
    "events": ["sms.delivered", "sms.failed", "email.bounced"],
    "description": "production"
  }'

const hook = await pm.webhooks.create({
  url: 'https://your-app.com/webhooks/robase',
  events: ['sms.delivered', 'sms.failed', 'email.bounced'],
  description: 'production',
});
console.log(hook.secret); // store this — used for signature verification

import { verifyWebhook } from '@robase/node';

app.post('/webhooks/robase', async (req, res) => {
  const raw = await rawBody(req);
  const sig = req.headers['robase-signature'] as string;

  const ok = await verifyWebhook(raw.toString('utf8'), sig, process.env.WEBHOOK_SECRET!);
  if (!ok) return res.status(401).end();

  const event = JSON.parse(raw.toString('utf8'));
  await processEvent(event);
  res.status(200).end();
});

from robase import verify_webhook

@app.route("/webhooks/robase", methods=["POST"])
def handler():
    raw = request.get_data()
    sig = request.headers["Robase-Signature"]

    if not verify_webhook(raw, sig, os.environ["WEBHOOK_SECRET"]):
        return "", 401

    event = json.loads(raw)
    process_event(event)
    return "", 200

http.HandleFunc("/webhooks/robase", func(w http.ResponseWriter, r *http.Request) {
    body, _ := io.ReadAll(r.Body)
    sig := r.Header.Get("Robase-Signature")

    if !robase.VerifyWebhook(body, sig, os.Getenv("WEBHOOK_SECRET"), 300) {
        http.Error(w, "", 401)
        return
    }

    var event struct { Type string; Data map[string]any }
    _ = json.Unmarshal(body, &event)
    processEvent(event)
    w.WriteHeader(200)
})