Verifying a webhook payload

Listen for events to automatically trigger reactions.

Webhook payloads must be verified before they are trusted and used on your server. This is done by verifying a signature sent with your webhook.

Your endpoint must return a 2xx (status code 200-299) response for the webhook to be marked as delivered. Any other statuses (including 3xx) are considered failed deliveries.

Using Openfort Node SDK#

Use the Openfort SDK's constructWebhookEvent method to verify an incoming webhook. Pass in the request body and the signature header. As an example, you can verify a webhook using the code below:

app.post(
  '/webhook',
  express.raw({ type: 'application/json' }),
  async (req: Request, _res: Response) => {
    const openfort = new Openfort('OPENFORT_SECRET_KEY')
    try {
      const event = await openfort.constructWebhookEvent(
        req.body.toString(),
        req.headers['openfort-signature']
      )
      switch (event.type) {
        case "transaction_intent.succeeded":
          console.log(`TransactionIntent ID: ${event.data.id}`)
          break
        case "transaction_intent.failed":
          console.log(`TransactionIntent ID: ${event.data.id}`)
          break
        default:
          console.log(`Unhandled event type ${event.type}`);
      }
    } catch (e) {
      console.error((e as Error).message)
    }
  }
)

Webhook object#

The webhook object contains the following fields:

{
  "data": {
    "id": "tin_c502d628-5bb3-42f2-b8f5-62ba4d71df3a",
    "createdAt": 1689869074,
    "object": "transactionIntent",
    "etc":"..."
  },
  "type": "transaction_intent.succeeded",
  "date": 1689869074
}

Where the type will be one of the following:

transaction_intent.succeeded: The transaction intent has arrived on-chain and is confirmed.
transaction_intent.failed: The transaction intent has arrived on-chain and is reverted.
transaction_intent.cancelled: The transaction intent parameters were not met.
transaction_intent.broadcast: The transaction intent was broadcasted.
balance. project: The project balance.
balance.contract: The contract balance.
balance.dev_account: The balance of your backend wallet.

The data will be a transaction intent object.

Webhooks via the dashboard

Use your dashboard to register webhooks.