Webhooks

1. Register an HTTPS endpoint in your product dashboard.
2. Read the raw request body before parsing JSON.
3. Verify the documented signature and timestamp.
4. Return a 2xx response quickly.
5. Process idempotently outside the request path.

// Pseudocode — use the product dashboard's current signing contract
verifyBeladedWebhook({ rawBody, signatureHeader, webhookSecret });

Deliveries may be retried or arrive out of order. Store the event ID, ignore duplicates, and fetch the current resource when ordering matters.

Use a development endpoint and development resources. Confirm signature failures, duplicate delivery handling, delayed processing, and endpoint downtime before enabling production traffic.