When new messages come into any of your channels or you want to be notified immediately we have any updates on your conversations, we trigger events that your application can listen to. We do this using webhooks.
A webhook is a URL on your server where we send payloads for such events.
You can specify your webhook URL on your Settings page or on individual channels where we would send POST requests to whenever an event occurs.
Kindly ensure your webhook URL is publicly available (localhost URLs cannot receive events).
Verify Event Origin
Signature
Our event comes with ```x-oneroute-signature``` in the header and you can use this to verify the event is from us and wasn't tampered with. To verify the origin, you can use the below code
const oneRouteSignatureHash = req.headers['x-oneroute-signature']
const hash = crypto.createHmac('sha512', 'OneRoute Secret Key').update(JSON.stringify(req.body)).digest('hex');
if (oneRouteSignatureHash === hash) {
// valid... do something
} else {
// invalid... do something
}
IP whitelisting
With this method, you only allow certain IP addresses to access your webhook URL while blocking out others. OneRoute will only send webhooks from the following IP addresses:
174.138.104.128
Receiving Events
To receive the event, you will have to create an unauthenticated POST route on your application that returns a 200 status code as it's response.
// Using Express
app.post("/my/webhook/url", function(req, res) {
// Retrieve the request's body
var event = req.body;
// Do something with event
res.send(200);
});
<?php
// Retrieve the request's body and parse it as JSON
$input = @file_get_contents("php://input");
$event = json_decode($input);
// Do something with $event
http_response_code(200); // PHP 5.4 or greater
?>
