Configure and deliver outgoing webhooks

Where: Admin → Addons & webhooks → Webhooks

Before you start

Outgoing webhooks send forum events to your receiver. They are separate from payment-provider callbacks entering your forum. With a secret, verify HMAC-SHA256 over the received raw body against X-Forovanta-Signature. Page loads queue delivery; the scheduler sends it.

Step by step

1. Add an endpoint URL and optional description.
2. Select the events, or All events. Provide a signing secret or let the board generate one.
3. Copy a newly generated secret immediately into your receiver.
4. Use Test, then inspect Deliveries and schedule the CLI delivery command printed by the screen every five minutes.
5. Rotate a secret if exposed and update the receiver at the same time.

Settings and behaviour

Outgoing webhooks send forum events to your receiver. They are separate from payment-provider callbacks entering your forum. With a secret, verify HMAC-SHA256 over the received raw body against X-Forovanta-Signature. Page loads queue delivery; the scheduler sends it.

Check the result

Confirm the receiver gets a signed test and an actual selected event; check queue/sent/failed counts.

Common questions and troubleshooting

Queued forever: scheduler missing or failing. Signature mismatch after rotation: update receiver secret and verify raw bytes, not re-serialised JSON.