FLOWLOGIC
curriculum
module /webhook-fundamentals

Webhook Fundamentals: Secure Routing & Validation

lvl 1status: open

outcome

Receive, verify, and route inbound webhooks that survive replay attacks, malformed payloads, and provider retries.

units

  1. U1

    Anatomy of a webhook

    headers, signatures, idempotency keys

  2. U2

    HMAC verification

    timing-safe compares, secret rotation

  3. U3

    Retry semantics

    at-least-once delivery, dedup strategies

  4. U4

    GDPR-safe routing

    PII minimisation before third-party hops

sandbox validation — how you pass

Build the flow in your engine and run it. When it works, export the flow JSON and send this payload to your unique validation URL. Headers and structure are verified server-side; the module flips to COMPLETED only on a correct hit.

POST https://learnflowlogic.com/api/sandbox/{your-webhook-id}
X-FlowLogic-Signature: hmac-sha256=<hex digest of the raw body>

{
  "module": "webhook-fundamentals",
  "artifact": {
    "flow_id": "<flow id from your engine URL>",
    "run_evidence": { "status": 200, "attempts": 1 }
  }
}

Sign in to get your unique validation URL and signing secret.

zero-cost sandbox // webhook fundamentals: secure routing & v