Webhooks Overview

// Example: Grant course access on order completion
if (event.type === 'order.completed') {
  const { customer, product } = event.data;
  await grantCourseAccess(customer.email, product.id);
}

// Example: Add customer to CRM
if (event.type === 'customer.created') {
  await crm.createContact({
    email: event.data.customer.email,
    source: 'pocketsflow'
  });
}

// Example: Manage subscription access
if (event.type === 'customer.subscription.deleted') {
  await revokeSubscriptionAccess(event.data.customer.email);
}

// Example: Send welcome email
if (event.type === 'order.completed') {
  await sendEmail({
    to: event.data.customer.email,
    template: 'welcome',
    data: event.data
  });
}

// Example: Track conversion in analytics
if (event.type === 'order.completed') {
  analytics.track('Purchase Completed', {
    revenue: event.data.amount,
    productId: event.data.product.id
  });
}

const express = require('express');
const app = express();

app.post('/webhooks/pocketsflow', express.raw({type: 'application/json'}), (req, res) => {
  const signature = req.headers['x-pocketsflow-signature'];
  const payload = req.body;

  // Verify signature (see Authentication docs)
  if (!verifySignature(payload, signature, WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }

  const event = JSON.parse(payload);

  // Process the event
  console.log('Received event:', event.type);

  // Acknowledge receipt
  res.status(200).send('Webhook received');
});

POST /webhooks
Authorization: Bearer pk_live_...
Content-Type: application/json

{
  "url": "https://yoursite.com/webhooks",
  "events": ["order.completed", "customer.created"],
  "description": "Production webhook"
}

GET /webhooks
Authorization: Bearer pk_live_...

PATCH /webhooks/{id}
Authorization: Bearer pk_live_...
Content-Type: application/json

{
  "events": ["order.completed"],
  "active": true
}

DELETE /webhooks/{id}
Authorization: Bearer pk_live_...

app.post('/webhooks', (req, res) => {
  // Acknowledge immediately
  res.status(200).send('OK');

  // Process asynchronously
  processWebhook(req.body).catch(console.error);
});

// Store webhook for retry if processing fails
app.post('/webhooks', async (req, res) => {
  res.status(200).send('OK'); // Acknowledge first

  try {
    await processWebhook(req.body);
  } catch (error) {
    // Store for retry
    await db.failedWebhooks.create({
      payload: req.body,
      error: error.message,
      retryCount: 0
    });
  }
});

ngrok http 3000
# Use the HTTPS URL (e.g., https://abc123.ngrok.io/webhooks)

lt --port 3000

cloudflared tunnel --url localhost:3000

const processedEvents = new Set();

function processWebhook(event) {
  if (processedEvents.has(event.id)) {
    return; // Already processed
  }

  // Process event...
  processedEvents.add(event.id);
}

app.post('/webhooks', (req, res) => {
  res.status(200).send('OK'); // Do this first

  // Then process asynchronously
  handleEvent(req.body).catch(console.error);
});

const WEBHOOK_SECRET = process.env.POCKETSFLOW_WEBHOOK_SECRET;