Apply a signed Loops preference webhook
Changed onAccepts one Loops webhook signed over the exact received body bytes. No Aura/Cognito bearer is required; webhook-id, webhook-timestamp, and webhook-signature must form a valid, recent Loops proof. The request body is limited to 64 KiB. The currently supported webhookSchemaVersion is 1.0.0. Supported eventName values are contact.unsubscribed, contact.deleted, email.unsubscribed, contact.mailingList.subscribed, contact.mailingList.unsubscribed, email.resubscribed, email.hardBounced, and email.spamReported. A verified unknown event name is receipted as ignored; malformed events and unsupported payload schema versions return an error for provider retry. 204 means the receipt and any local preference effects committed, or the authenticated delivery was an identical duplicate or a safely ignored event. It does not mean a marketing message was sent or delivered. Conflicting delivery identity returns 409; temporary database/provider-reader failure or the 10-second processing budget returns retryable 503. All responses are no-store.
Request
- Base URL: https://api.stage.aura-historia.com
- URL: https://api.stage.aura-historia.com/api/v1/webhooks/loops
- Auth: none required
Headers
Loops delivery identifier used for committed receipt deduplication.
Unix timestamp covered by the Loops signature; stale proofs are rejected.
Loops HMAC-SHA256 signature over delivery ID, timestamp, and exact raw body bytes.
Request body
Example request
{
"webhookSchemaVersion": "1.0.0"
}Response
Authenticated event receipt and required local effects committed, or identical duplicate/safe ignore. No response body.
Changes
- info
endpoint added
- info
- info
endpoint added
- info