Webhooks

Registre um endpoint HTTPS. Aporta assina cada delivery com HMAC.

Assinatura

• Header: X-Aporta-Signature: t=<unix>,v1=<hex>
• Payload assinado: `${t}.${rawBody}`
• Algoritmo: HMAC-SHA256 com o secret whsec_… do endpoint

SDK verify

import { Aporta, verifyWebhook } from "@aporta/sdk";

const event = verifyWebhook(whsec, rawBody, req.headers.get("x-aporta-signature")!);
// ou: Aporta({ secret }).webhooks.verify(whsec, rawBody, header)

Eventos

Veja o catálogo em GET /v1/webhooks/events. Inclui checkout/transparent disputed, subscription.renewed|trial_started, transfer.*, crypto.*.