Webhooks and retries

Webhooks send an HTTP POST to your endpoint when something happens in Ferrow, for example an incident opening.

Verify the signature

Every request carries a Ferrow-Signature header. Compute an HMAC SHA-256 of the raw body with your endpoint secret and compare it in constant time.

const sig = crypto
  .createHmac("sha256", secret)
  .update(rawBody)
  .digest("hex")

const sig = crypto
  .createHmac("sha256", secret)
  .update(rawBody)
  .digest("hex")

const sig = crypto
  .createHmac("sha256", secret)
  .update(rawBody)
  .digest("hex")

Retries

A delivery that does not return a 2xx status is retried on the schedule in your retry policy. Events that still fail go to the dead-letter queue for 14 days.

Respond quickly

Return a 2xx status within 10 seconds and do the real work after. Slow endpoints are treated as failed.