E-mail replies to support tickets (inbound mail provider webhook)
POST/api/inbound-mail/:driver
Server-to-server from the configured provider only; 404 until inbound
mail is set up (SUPPORT_INBOUND_DOMAIN). mailgun: a Route forwarding
to /api/inbound-mail/mailgun/mime (the raw message as body-mime), signed with the webhook signing key
(timestamp + token, each token used once). cloudflare: an Email Worker
posting the raw message with X-Inbound-Timestamp and
X-Inbound-Signature: sha256=<hmac of "<timestamp>.<body>">. A signed
delivery answers 200 with status = accepted or the reason it was
dropped (bad token, sender not allowed, closed ticket, duplicate,
auto-reply, DMARC failure…). Only the ticket author's login address or
a ticket admin of the same workspace may write in.
Request
Responses
- 200
- 401
- 404
Received (appended or dropped).
Signature missing, wrong, stale or replayed.
Resource not found (or not visible to the current tenant).