Webhooks

Open certain actions taking place within your account, we can trigger a JSON POST callback to a URL or your choice.

Your Webhook handlers are expected to respond within 5 seconds. If they take longer than this, then the failures count will be incremented and the webhook queued for reprocessing. Reprocessing happens at 5 minutes, 30 minutes, 1 hour, 2 hours, 6 hours - and after that the webhook will be disabled.

The headers of the request from our servers will contain the following two important headers: X-Civo-Event and X-Civo-Signature. X-Civo-Event is a UUID that is unique to this event. We don't track them ourside, but retries of the same event will have the same ID, so you can track it and not process it twice. X-Civo-Signature is an OpenSSL HMAC SHA1 digest of the entire payload using either the secret of the webhook. The secret is randomly generated when the webhook is created if one isn't specified. A simple example of how to calculate this in Ruby would be:

signature = OpenSSL::HMAC.hexdigest(
  OpenSSL::Digest.new('sha1'),
  webhook.secret,
  request.body
)

The following events are available to subscribe to:

Listing webhooks

Listing the webhooks is possible by making a GET request to the https://api.civo.com/v2/webhooks resource.

Request

This request doesn't take any parameters.

Response

The response from the server will be a JSON array of webhooks.

[
  {
    "id": "b8de2e4e-72f4-4911-83ee-f4fc030fc4a2",
    "events": ["instance.created", "instance.deleted"],
    "url": "https://api.example.com/webhook",
    "secret": "DfeFUON8gorc5Zj0hk4GT1M9QImnRL6J",
    "disabled": false,
    "failures": 0,
    "last_failure_reason": "",
  },
  // ...
]

Example of listing webhooks

• Curl
• Node.js
• Ruby

curl -H "Authorization: bearer 12345" https://api.civo.com/v2/webhooks

var request = require('request');

request.get(
  'https://api.civo.com/v2/webhooks',
  {},
  function (error, response, body) {
    if (!error && response.statusCode == 200) {
      console.log(body)
    }
  }
).auth(null, null, true, '12345');

http = Net::HTTPS.new('api.civo.com', 443)
headers = {
  'Authorization' => 'bearer 123456',
  'Content-Type' => 'application/x-www-form-urlencoded'
}

resp, data = get('v2/webhooks', headers)

Create a new webhook

Any user can create webhooks for their account.

New webhooks are created by sending a POST request to https://api.civo.com/v2/webhooks.

Request

The required parameters are listed below.

Response

The response is a JSON representation of the webhook, including the secret.

{
  "id": "b8de2e4e-72f4-4911-83ee-f4fc030fc4a2",
  "events": ["*"],
  "url": "https://api.example.com/webhook",
  "secret": "DfeFUON8gorc5Zj0hk4GT1M9QImnRL6J",
  "disabled": false,
  "failures": 0,
  "last_failure_reason": "",
}

Example of creating a webhook

• Curl
• Node.js
• Ruby

curl -H "Authorization: bearer 12345" https://api.civo.com/v2/webhooks \
  -F events='["*"]' -F url=https://api.example.com/webhook

var request = require('request');

request.post(
  'https://api.civo.com/v2/webhooks',
  {
    "events": ["*"],
    "url": "https://api.example.com/webhook"
  },
  function (error, response, body) {
    if (!error && response.statusCode == 200) {
      console.log(body)
    }
  }
).auth(null, null, true, '12345');

http = Net::HTTPS.new('api.civo.com', 443)
headers = {
  'Authorization' => 'bearer 123456',
  'Content-Type' => 'application/x-www-form-urlencoded'
}

safe_url = CGI::escape("https://api.example.com/webhook")
resp, data = http.post('/v2/webhooks', 'events=["*"]&url=' + safe_url, headers)

Test a webhook

Once a webhook is created, you can test it by sending a POST request to https://api.civo.com/v2/webhooks/:id/test and this will call your webhook handler with a dummy payload.

Request

No parameters are required for this request.

Response

The response is a JSON object that simply confirms that the request to test the webhook was received.

{
  "result": "success"
}

Example of testing a webhook

• Curl
• Node.js
• Ruby

curl -H "Authorization: bearer 12345" -X POST https://api.civo.com/v2/webhooks/12345/test

var request = require('request');

request.post(
  'https://api.civo.com/v2/webhooks/12345/test',
  {},
  function (error, response, body) {
    if (!error && response.statusCode == 200) {
      console.log(body)
    }
  }
).auth(null, null, true, '12345');

http = Net::HTTPS.new('api.civo.com', 443)
headers = {
  'Authorization' => 'bearer 123456',
  'Content-Type' => 'application/x-www-form-urlencoded'
}

resp, data = http.post('/v2/webhooks/12345/test', '', headers)

Update a webhook

After creating a webhook, any user can update it.

Webhooks are updated by sending a PUT request to https://api.civo.com/v2/webhooks/:id.

Request

The parameters are as per creation of webhooks.

Response

The response is a JSON representation of the updated webhook, including the secret.

{
  "id": "b8de2e4e-72f4-4911-83ee-f4fc030fc4a2",
  "events": ["*"],
  "url": "https://api.example.com/webhook",
  "secret": "DfeFUON8gorc5Zj0hk4GT1M9QImnRL6J",
  "disabled": false,
  "failures": 0,
  "last_failure_reason": "",
}

Example of updating a webhook

• Curl
• Node.js
• Ruby

curl -H "Authorization: bearer 12345" -X put https://api.civo.com/v2/webhooks/12345 \
  -F events='["instance.created"]'

var request = require('request');

request.put(
  'https://api.civo.com/v2/webhooks/12345',
  {
    "events": ["instance.created"]
  },
  function (error, response, body) {
    if (!error && response.statusCode == 200) {
      console.log(body)
    }
  }
).auth(null, null, true, '12345');

http = Net::HTTPS.new('api.civo.com', 443)
headers = {
  'Authorization' => 'bearer 123456',
  'Content-Type' => 'application/x-www-form-urlencoded'
}

resp, data = http.put('/v2/webhooks/12345', 'events=["instance.created"]', headers)

Deleting a webhook

An account holder can remove one of their webhooks by sending a DELETE request to https://api.civo.com/v2/webhooks/:id.

Request

This request takes no parameters, only the ID of the webhook to delete is in the URL. No confirmation step is required, this step will remove the webhook immediately.

Response

The response from the server will be a JSON block. The response will include a result field and the HTTP status will be 202 Accepted.

{
  "result": "success"
}

Example of deleting a webhook

• Curl
• Node.js
• Ruby

curl -H "Authorization: bearer 12345" \
  -X DELETE https://api.civo.com/v2/webhooks/12345

var request = require('request');

request.del(
  'https://api.civo.com/v2/webhooks/12345',
  function (error, response, body) {
    if (!error && response.statusCode == 202) {
      console.log(body)
    }
  }
).auth(null, null, true, '12345');

http = Net::HTTPS.new('api.civo.com', 443)
headers = {
  'Authorization' => 'bearer 123456',
  'Content-Type' => 'application/x-www-form-urlencoded'
}

resp, data = http.delete('/v2/webhooks/12345', headers)