Webhooks

Events

1. 1design.saved, design.deleted
2. 2deployment.started, deployment.completed, deployment.failed
3. 3campaign.started, campaign.ended
4. 4member.created, member.removed

Verifying the signature

const expected = crypto
  .createHmac("sha256", process.env.SIGNORA_WEBHOOK_SECRET)
  .update(rawBody)
  .digest("hex");
// compare with the x-signora-signature header using timingSafeEqual

Always verify before trusting the payload, and reply 2xx within five seconds — we retry with backoff for 24 hours.