subscription.active
Sent to your endpoint as a signed POST. Answer with any 2xx within 10 seconds; failures are retried with backoff for about a day. Verify the signature before trusting the body.
Sent to your endpoint as a signed POST. Answer with any 2xx within 10 seconds; failures are retried with backoff for about a day. Verify the signature before trusting the body.
Header Parameters
Unique per event; use it to ignore duplicates.
^evt_[0-9a-f]{32}$Unix seconds. Reject deliveries older than a few minutes.
v1, + base64 HMAC-SHA256 of {webhook-id}.{webhook-timestamp}.{raw body}, keyed with the base64-decoded part of your whsec_ secret.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
Example Requests
/subscription.activerefund.succeeded Webhook
Sent to your endpoint as a signed POST. Answer with any 2xx within 10 seconds; failures are retried with backoff for about a day. Verify the signature before trusting the body.
subscription.cancelled Webhook
Sent to your endpoint as a signed POST. Answer with any 2xx within 10 seconds; failures are retried with backoff for about a day. Verify the signature before trusting the body.