webhook.test
Sent only when you choose “send a test event” for an endpoint in the web app, to that endpoint alone, whatever it subscribes to. data is an empty object. Verify the Shootika-Signature header as for any other event. It is delivered like any other event: anything but a 2xx answer within 10 seconds is tried up to 8 times over about 24 hours, and its failures count toward the 3 days of failures after which Shootika turns an endpoint off.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Header Parameters
Section titled “Header Parameters”t=<unix seconds>,v1=<hex>. v1 is the hex HMAC-SHA256 of the string <t>.<raw request body>, keyed with the endpoint’s whole whsec_... secret. Recompute it over the raw bytes you received, compare in constant time, and reject a t more than 5 minutes from your clock.
Request Bodyrequired
Section titled “Request Bodyrequired”object
Unique per event (evt_...). Use it to ignore a delivery you already handled.
frame for the four frame events; empty for webhook.test.
object
object
The frame this one retries, or null.
queued waiting to start, processing being made, ready finished, failed could not be made (and refunded), canceled stopped.
When an unapproved frame is deleted. Null once the frame is approved.
True when the frame failed, because a failed frame is always refunded. Null otherwise.
object
Responses
Section titled “Responses”Received. The body is ignored.