Federation
Inbound nudge from the publishing instance
Public route — excluded from the global /api/* auth gate because the caller is a remote instance with no tenant credential of its own against this subscriber. Authenticated instead by the per-subscription webhook_secret as an HMAC-SHA256 signature over the raw request body (x-federation-signature: sha256=<hex>), constant-time compared. Carries no delta payload — it only triggers the same pull path a scheduled tick would.
post/api/federation/webhook/{id}
Request
- Base URL: http://localhost:38200
- URL: http://localhost:38200/api/federation/webhook/{id}
- Auth: none required
Path parameters
idinteger required
Headers
x-federation-signaturestring required
sha256=<hex> HMAC-SHA256 over the raw request body, keyed on the subscription's webhook_secret.
Response
Subscription exists but is not active — no job enqueued.
Changes
No recorded changes to this operation across all 1 revision of this API.