Real-Time Event Delivery

📡 How Webhooks Work

Webhooks allow FlowCMS to send HTTP POST requests to your configured endpoints whenever specific events occur. Unlike polling, webhooks push data to you in real-time, ensuring your systems stay synchronized without unnecessary API calls.

📋 Supported Events

Subscribe to the events that matter to your application. You can filter events by content type, workspace, or user role.

📦 Payload Structure

Every webhook request contains a consistent JSON payload with metadata, the event type, and the affected resource. All payloads include an ID, timestamp, and signature verification header.

{
  "id": "evt_8xK9mP2vQw7nL4jR",
  "type": "content.published",
  "timestamp": "2025-04-12T14:32:09Z",
  "workspace_id": "ws_aB3dE5fG",
  "data": {
    "content_id": "cnt_9X2mKpLq",
    "title": "Q2 Product Launch Guide",
    "author": {
      "id": "usr_mN7pQ2rS",
      "name": "Sarah Chen"
    },
    "previous_status": "draft",
    "current_status": "published",
    "url": "https://app.flowcms.io/content/cnt_9X2mKpLq"
  }
}

🔐 Security & Verification

FlowCMS signs every webhook payload using HMAC-SHA256. Include your webhook secret to verify the signature before processing the event.

const crypto = require('crypto');
const secret = process.env.FLOWCMS_WEBHOOK_SECRET;

function verifyWebhook(payload, signature) {
  const hmac = crypto.createHmac('sha256', secret);
  hmac.update(payload, 'utf8');
  const digest = hmac.digest('hex');
  
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(digest)
  );
}

⚙️ Configuration Guide

Set up webhooks in minutes through the FlowCMS dashboard or via our API. Configure endpoints, event filters, retry policies, and dead-letter queues.

❓ Frequently Asked Questions