Webhooks

Receba eventos assíncronos no seu endpoint. Assinatura no header X-Sigesc-Signature.

Registar endpoint

POST /v1/webhooks

curl https://api.sigesc.ao/v1/webhooks \
  -H "Authorization: Bearer sk_test_..." \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://seu-app.ao/hooks/sigesc",
    "events": ["invoice.issued", "invoice.failed"]
  }'

Verificar assinatura

Calcule o HMAC do corpo raw com o segredo do webhook e compare com X-Sigesc-Signature antes de processar.