Skip to main content

IdeaSoft store webhook (public)

POST 
/api/hooks/ideasoft/:token/:family

One url per connected store and topic family (doc 86 §2.4). Trust is X-Ideashop-Hmac-Sha256: base64 HMAC-SHA256 of the raw body keyed by the store's own client secret; a bad signature is 401. The body carries only the changed fields, so only its id is used — the whole object is read from IdeaSoft on the queue. Everything retrying cannot fix (unknown url, unreadable body, duplicate) is 200: IdeaSoft deletes a subscription whose deliveries keep failing.

Request​

Responses​

Queued, or acknowledged with nothing to do.