Webhook Tester

Validate endpoint readiness, signature verification, and retry behavior before production.

Recommended Validation Flow

Create a staging webhook endpoint and enable only run lifecycle events.

Trigger test deliveries and verify your endpoint logs event IDs and timestamps.

- Check HTTPS certificate chain and TLS protocol
- Verify 2xx responses within 5 seconds
- Persist event IDs for dedupe protection

HMAC Signature Example

Use the shared signing secret to verify request authenticity.

import crypto from 'crypto'

const expected = crypto
  .createHmac('sha256', process.env.SERVOAGENT_WEBHOOK_SECRET!)
  .update(rawBody)
  .digest('hex')

const trusted = crypto.timingSafeEqual(
  Buffer.from(expected),
  Buffer.from(signatureHeader.replace('sha256=', ''))
)

Delivery Replay Handling

Retries and manual replays can deliver the same event more than once.

Use idempotency keys and event IDs as unique constraints in your processing pipeline.