Skip to main content
Authsignal sends webhooks as signed JSON over HTTPS whenever a relevant event happens in your tenant. Your endpoint returns a 2xx response to acknowledge the event.

​
How to receive webhooks

​
1. Create an endpoint

In your application, create a route that accepts POST requests over HTTPS. For local development, expose your endpoint with a tunnel such as ngrok or Cloudflare Tunnel.

​
2. Configure the webhook URL

Webhook URLs are configured in different places depending on the event type.

​
3. Verify the signature

Every request is signed with an X-Signature-V2 header. Verify it before trusting the payload. See Verify webhook requests.

​
4. Handle the event

Inspect the envelope type and route to the right handler. Each event’s data schema is documented on its own page in this section.