Webhooks
Configure webhook endpoints to receive real-time event notifications.
Event Types
- key.created
- key.rotated
- secret.created
- secret.updated
- secret.deleted
- billing.subscription.updated
Signature Verification
const body = await request.text()
const signature = request.headers.get('x-qapi-signature')
const expected = createHmac('sha256', process.env.MOLLIE_WEBHOOK_SECRET!)
.update(body)
.digest('hex')
if (signature !== expected) {
return new Response('invalid signature', { status: 401 })
}