Webhooks integration

Send Lepta events to any HTTPS endpoint, signed with HMAC.

What it does

Subscribe any URL to Lepta events. Each delivery is signed with HMAC SHA-256 using your endpoint's secret, retried with exponential backoff, and visible in a per-endpoint delivery log.

Setup

  1. 1

    Add an endpoint

    Go to Integrations → Webhooks New endpoint. Enter your HTTPS URL and pick the events to subscribe to.
  2. 2

    Verify the signature

    Each request carries an X-Lepta-Signature header of the form t=<ts>,v1=<hex>. Compute HMAC-SHA256(secret, "{ts}.{raw_body}") and compare with constant-time equality. Reject anything older than 5 minutes.
  3. 3

    Inspect deliveries

    Every attempt is logged with status code, response time, and payload preview. Failed deliveries can be redelivered manually.

Events

bug.createdFired when a bug is created.
bug.updatedFired on field changes.
bug.status_changedFired on workflow state change.
session.createdFired when a session starts.
session.endedFired when a session ends.
pingManual test ping you can trigger from the UI.