HMAC Authentication
Deliverect can sign outgoing webhook requests using HMAC-SHA256, allowing you to verify that requests genuinely originate from Deliverect and have not been tampered with in transit. This can be achieved using a pre-shared secret configured on your integration.
IP Whitelisting
If your integration restricts inbound traffic by IP address, allow requests from Deliverect’s IP addresses.
| Webhook | Type | Function |
|---|---|---|
| Register POS | POST | A registration webhook event will be sent to a designated endpoint with all the information needed to establish the integration. This endpoint should be provided by the POS. |
| Order Notification | POST | When a customer orders from a Deliverect integrated channel, it will immediately deliver a webhook to a specified webhook endpoint provided by the POS. |
| Tax Calculation | POST | Called by Deliverect to request tax calculation from the POS for an order before it is finalized. |
| Order Validation | POST | Called by Deliverect to validate an order with the POS before it is finalized. |
| Sync Products | GET | This will be called when the user initiates a product sync from Deliverect. This should be responded to by calling the Insert/Update Products Categories endpoint. |
| Product Update Callback (async) | POST | Callback endpoint used by the POS receive the result of an asynchronous product update. |
| Sync Floors | GET | Endpoint to receive floors from the POS. |
| Sync Tables | GET | Endpoint to receive tables from the POS. |