Reference
Webhooks
Receive signed Taskologic events and process them safely.
Verify every delivery
Compute HMAC SHA-256 over the timestamp, a period, and the raw request body. Compare it with the signature header before processing the event.
- x-taskologic-timestamp
- x-taskologic-signature: v1=...
- x-taskologic-event-id
Handle events idempotently
Use the event ID to prevent duplicate processing. Return a successful response only after the delivery has been accepted for processing.
Next
OAuth 2.0