Webhooks (1.1.0)

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude

Summary

Introduction

REVER webhooks provide real-time notifications for key events in the return process. They allow businesses to automate responses throughout the return lifecycle.
By subscribing, you receive instant updates when return statuses change — including creation, shipping updates, completion, and cancellations.

Registration

To start receiving webhooks, contact your account manager to register your endpoint URL and obtain the shared secret used for signature verification.

Security and Authentication

Webhooks are sent to public endpoints — your server is responsible for validating that each request genuinely comes from REVER.

Every webhook request includes an X-REVER-Signature HTTP header containing a HMAC-SHA256 signature. To verify it:

1. Retrieve the raw request body (as a string, before any parsing).
2. Compute HMAC-SHA256(body, sharedSecret) using the shared secret provided during registration.
3. Compare your computed signature against the value in X-REVER-Signature. Reject the request if they do not match.