In Api section of your account, you can find the Webhooks section. In this section you will find where to add your Urls to use with the webhook events. The webhook events are organised by channel for the delivery messages or organised by type for the contact activities.

For Webhook POSTs, Pushtech listens for the following codes from your server and reacts accordingly:

• if Pushtech receives a 200 (Success) code it will determine the webhook POST is successful and will not retry.

• If Pushtech receives a 406 (Not Acceptable) code, it will determine the POST is rejected and will not retry.

• For any other code, Pushtech will retry POSTing according to the schedule below for Webhooks other than the delivery events.

If your application is unable to process the webhook request but you do not return a 406 error code, Pushtech will retry (other than for delivery events) during 4 hours at the following intervals before stop trying: 5 minutes, 5 minutes, 10 minutes, 10 minutes, 30 minutes, 1 hour and 2 hours.

To verify the webhook is originating from Pushtech you need to:

• Concatenate timestamp and token values.

• Encode the resulting string with the HMAC algorithm (using your Account secret Key as a key and SHA256 digest mode).

• Compare the resulting hexdigest to the Authorization token

• Optionally, you can check if the timestamp is not too far from the current time.

Below is a PHP code sample used to verify the Authorization token:

function verify($account_secret_key, $token, $timestamp, $authorization) {
    $data = $timestamp . $token;
    return hash_hmac('sha256', $data, $account_secret_key) == $authorization;
}

And here’s a sample in Python:

import hashlib, hmac

def verify(account_secret_key, token, timestamp, authorization):
  hmac_digest = hmac.new(key=account_secret_key,
    msg='{}{}'.format(timestamp, token),
    digestmod=hashlib.sha256).hexdigest()
  return hmac.compare_digest(unicode(authorization), unicode(hmac_digest))

And here’s a sample in Ruby:

require 'openssl'
def verify(account_secret_key, token, timestamp, authorization)
  digest = OpenSSL::Digest::SHA256.new
  data = [timestamp, token].join
  authorization == OpenSSL::HMAC.hexdigest(digest, account_secret_key, data)
end

{
  "created_at":"2016-12-09T15:28:28Z",
  "_id":"584acd9c85216d892f000002",
  "origin":"campaign",
  "type":"event",
  "event_type":"sent",
  "contact": {
    "_id": "584acff2f92ea1bcf7000012",
    "user_id": "jhon_doe",
    "name_first": "Jhon",
    "name_last": "doe",
    "email": "Jhon.doe@cendyn.com",
    "phone": "+346xxxxxxxx",
    "device_id": "5848408485216d13d1000009"
  },
  "campaign":{
    "_id":"5848408485216d13d100000a",
    "name":"Welcome email"
  },
  "timestamp":1481297309,
  "token":"9ykzr1m09d3jgq04k5j2htlf0rs7wy93rtniaes6v3lyk2scm7",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

 {
  "id":"584acffdf92ea1e99a000001",
  "created_at":"2016-12-09T15:38:37Z",
  "updated_at":"2016-12-09T15:38:49Z",
  "channel":"EMAIL",
  "status":"delivered",
  "refunded":false,
  "url":null,
  "campaign":{
    "_id":"5848408485216d13d100000a",
    "name":"Welcome"
  },
  "template"{
   "_id": "5848408485216d13d1000009",
   "name" : "Welcome"
  },
  "template_data":{
    "sender":"Cendyn CRM platform ",
    "subject":"",
    "content":"",
    "reply_to":""
  },
  "channel_data":{
    "3":"Jhon.doe@cendyn.com"
  },
  "contact": {
    "_id": "584acff2f92ea1bcf7000012",
    "user_id": "jhon_doe",
    "name_first": "Jhon",
    "name_last": "doe",
    "email": "Jhon.doe@cendyn.com",
    "phone": "+346xxxxxxxx",
    "device_id": "5848408485216d13d1000009"
  },
  "timestamp":1481297931,
  "token":"mcnwldwmullbg4wkcx33ewirm4kmi5vn1i9k30hob5vagdk69w",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{
  "contacts_valid_count":3,
  "contacts_failed_count":1,
  "failed_contacts":[
                    {
                      "contact":
                        {
                          "name_first":"Doria",
                          "name_last":"Leppiwell",
                          "city":"Shajia’ao",
                          "gender":"Female",
                          "email":"badformat",
                        },
                        "errors":["Email format not recognised"]

                    }
                    ],
  "valid_contacts":[
                  {
                    "_id":"599bf99af70366f2be000001",
                    "user_id":"1",
                    "email":"dleppingwell0@mydomain.com",
                    "phone_countrycode":"34",
                    "phone_number":866666666
                  },
                  {
                    "_id":"599bf99af70366f2be000002",
                    "user_id":"3",
                    "email":"kschapiro1@domain.gov",
                    "phone_countrycode":34,
                    "phone_number":566678888
                  },
                  {
                    "_id":"599bf99af70366f2be000003",
                    "user_id":"2",
                    "email":"acasazza2@domainmarket.com",
                    "phone_countrycode":34,
                    "phone_number":877777777
                  }
                  ],
  "timestamp":1503394216,
  "token":"2m93z8xw1ofoiy890xx23ql9ah0gz60t85nuc9wyshu5apjxtt",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{ "id": "599bf99af70366f2be000001",
  "received_at":"2018-01-23T15:38:37Z",
  "text":"This simple message text",
  "from":"346xxxxxxxx",
  "timestamp":1503394216,
  "token":"2m93z8xw1ofoiy890xx23ql9ah0gz60t85nuc9wyshu5apjxtt",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{
  "action": "create",
  "origin": "platform_individual",
  "contact": {
    "id": "5b6d50651a7e4ef63e000005",
    "name_first": "Jhon",
    "list_subscriptions": [],
    "name_last": "Doe",
    "phone_countrycode": "xx",
    "phone_number": "xxxxxxxxx",
    "user_id": xxx,
    "city": xxx,
    "gender": xxx,
    "country": xxx,
    "language": xxx,
    "facebook_id": xxx,
    "facebook_friends": xxx,
    "google_id": xxx,
    "twitter_id": xxx,
    "twitter_followers": xxx,
    "born_date": xxx,
    "email": "jhon.do3@cendyn.com",
    "gdpr_marketing_consent": true,
    "gdpr_accept_terms": true,
    "gdpr_date": 2018-07-09T15:28:28Z,
    "gdpr_remote_ip": xxxxxx,
    "gdpr_link_terms": xxxxxx,
    "gdpr_link_privacy": xxxxxx,
    "tags": [],
    "company_id": xxxx,
    "company_name": xxxx
  },
  "timestamp": 1533890854,
  "token": "dtz2gbeqb556ayg2z9hwe4mgdn1or1qw7utaigiiaf8b9t5f1a",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{
  "action": "channel_subscription",
  "origin": "api",
  "contact_id": "5b6d96991a7e4e8ac8000128",
  "user_id":"6712",
  "subscription":{
    "channel":"email",
    "blacklisted":true,
    "origin":"api"
  }
  "timestamp": 1533909631,
  "token": "gvqmo9vm671pf8cnp5iwnqiwtxw7csc6u8v1p8uukn23g4yjxc",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{
  "action": "update",
  "origin": "platform_individual",
  "contact": {
    "id": "5b6d96991a7e4e8ac8000128",
    "user_id": "6712",
    "changes": {
      "city": "New York"
    },
    "contact_url": "https://api.eu.cendyncrm.com/v2/account/5a9eb2cd1a7e4e6b6f000007/contact/5b6d96991a7e4e8ac8000128"
  },
  "timestamp": 1533909631,
  "token": "gvqmo9vm671pf8cnp5iwnqiwtxw7csc6u8v1p8uukn23g4yjxc",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

{
  "action": "destroy",
  "origin": "platform_bulk",
  "contacts_ids": [
    "5b6d96991a7e4e8ac8000002",
    "5b6d96991a7e4e8ac8000003"
  ],
  "users_ids": [
    "9673",
    "8086"
  ],
  "timestamp": 1533908635,
  "token": "a8uau26zd3gqtkbh3m5wrp9ipac1fxjnsg4wsbg9xam6loadu9",
  "account_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}