Webhooks

Outbound: Webhook

Same as Logic → Webhooks → Endpoints.

from pawabase_iac import Webhook, env

Webhook(
    "partner-orders",
    url="https://partner.example.com/hooks/pawabase",
    events=["orders.created", "orders.updated"],
    secret=env("PARTNER_SECRET"),
    max_attempts=5,
    headers={"x-source": "pawabase"},
)

Argument	Meaning	Default
`name`	Letters, digits, dashes	required
`url`	Your endpoint. Use HTTPS	required
`events`	Event names or patterns	`[]` (send nothing; use `["*"]` for all)
`headers`	Extra headers on every request	`{}`
`secret`	Signs each request. At least 16 characters. Use `env("NAME")`	none
`max_attempts`	1 to 10	`5`
`enabled`, `description`

Your server verifies the Pawabase-Signature header: see Verify signatures.

Inbound: InboundHook

Same as Logic → Webhooks → Inbound hooks.

from pawabase_iac import InboundHook, env

InboundHook(
    "stripe",
    run=handle_stripe,                         # a flow, or event="stripe.received" to emit an event
    verification="hmac-sha256-ts",
    signature_header="stripe-signature",
    secret=env("STRIPE_WEBHOOK_SECRET"),
)

Argument	Meaning	Default
`slug`	The last part of the URL: `/hooks/v1/<environment>/<slug>`	required
`run` / `event`	Start a flow, or emit an event	one required
`verification`	`hmac-sha256`, `hmac-sha512`, `hmac-sha256-ts`, `pawabase`, `token` or `none`	`hmac-sha256`
`signature_header`	The header that carries the signature	`x-signature`
`secret`	The shared secret. Use `env("NAME")`	none
`name`, `description`, `enabled`

Avoid verification="none". See Inbound hooks.

Secrets are write-only

A webhook or hook secret is sent when the definition is created or changes and never read back or compared. To rotate one, change the environment variable and run pawabase deploy --force-secrets.

Secrets and env

env() in detail.

Events

Subscriptions and schedules.

Overview

Infrastructure as code

Define your backend

Logic and events

Files and mail

Ship it

Reference

SDK clients

Outbound: Webhook

Inbound: InboundHook

Secrets are write-only

Secrets and env

Events

​Outbound: Webhook

​Inbound: InboundHook

​Secrets are write-only

Secrets and env

Events

Outbound: Webhook

Inbound: InboundHook

Secrets are write-only