Webhook Management

All webhook requests from Velora include a cryptographic signature in the X-Velora-Signature header.

This allows you to verify that the webhook payload originated from Velora and has not been tampered with.

Webhook Headers

Header	Description
`X-Velora-Event`	The event type (e.g., `DEPOSIT_COMPLETED`, `TRANSFER_FEEDBACK`)
`X-Velora-Event-Id`	Unique identifier for the event
`X-Velora-Delivery-Id`	Unique identifier for this delivery attempt
`X-Velora-Institution-Id`	Your institution ID
`X-Velora-Timestamp`	Unix timestamp (seconds) when the webhook was sent
`X-Velora-Signature`	The signature in format: `sha256=<hex_signature>`

Sample Webhook Payload

{
  "eventId": "550e8400-e29b-41d4-a716-446655440000",
  "eventType": "DEPOSIT_COMPLETED",
  "eventVersion": "1.0",
  "eventTimestamp": "2024-01-15T10:30:00Z",
  "data": {
    "transactionId": "fb-tx-123456",
    "institutionId": 1,
    "subInstitutionId": 10,
    "assetId": "USDT",
    "amount": "100.50",
    "fromAddress": "0x1234...abcd",
    "toAddress": "0x5678...efgh",
    "status": "COMPLETED",
    "completedAt": "2024-01-15T10:29:55Z",
    "txHash": "0xabc123..."
  }
}