Receive a webhook

Receives an inbound webhook from any sender. Answers 200 once the event is durably queued, in about a second; delivery to your destinations is asynchronous. When the app has a source and signing secret set, the sender's signature is checked here before anything is stored (Stripe-Signature, X-Hub-Signature-256, X-Shopify-Hmac-Sha256, x-line-signature, Standard Webhooks' webhook-signature and the other schemes listed at https://anyhook.net/docs#sources). A Generic app is not signature-checked. No authentication is required on this endpoint. Only POST is accepted, apart from Meta's GET hub.mode=subscribe handshake. Browsers can post too: an OPTIONS preflight is answered, every answer carries Access-Control-Allow-Origin: *, and a plain form submitted with ?redirect= set to a page on the form's own site (its Origin or Referer) is redirected there once the event is stored. Bodies are kept as text: JSON, form-urlencoded and other text bodies are forwarded byte-for-byte, binary bodies and multipart file uploads are not.