Webhook-Ereignisse
Abonnieren Sie einen Webhook-Endpunkt, um diese Ereignisse zu erhalten. Jede Zustellung trägt einen X-PIE-Event-Header mit dem Ereignisnamen und einen X-PIE-Signature-256-Header der Form sha256=<hmac> — ein HMAC-SHA256 über den rohen Request-Body, geschlüsselt mit Ihrem Abonnement-Secret. Prüfen Sie die Signatur bei jeder Zustellung, bevor Sie der Nutzlast vertrauen: Berechnen Sie denselben HMAC über den rohen Body und vergleichen Sie in konstanter Zeit. Die Zustellung erfolgt mindestens einmal — deduplizieren Sie über die Delivery-ID.
| Ereignis | Gruppe | Wird ausgelöst, wenn |
|---|---|---|
product.published | Product | A product version was published (or re-published) by its producing org. |
product.archived | Product | A product was archived (soft-deleted) by its producing org. |
grant.created | Grant | A data-access grant was created; delivered to both the granting PIP and the receiving PIC. |
grant.revoked | Grant | A data-access grant was revoked; delivered to both sides of the relationship. |
sync.completed | Sync | A daily catalogue sync finished for the org. |
workflow.transitioned | Workflow | An approval-workflow instance moved to a new state. |
workflow.task_assigned | Workflow | A workflow task was assigned (or reassigned) to a reviewer. |
workflow.task_overdue | Workflow | A workflow task passed its SLA due time and the assignee was reminded. |
webhook.test | Webhook | A test ping, sent on demand from the webhook settings ("Send test") to that one subscription only, whatever events it subscribes to. |
workflow.task_escalated | Workflow | An overdue workflow task was escalated to the policy role after the grace window. |