Set up webhooks
Until Cloud has a screen for it, the Hablame team registers your endpoint on request. This is what you need to send and what you get back.
3 min read
What to send support
Email developers@hablame.co with these four items:
| Item | Requirements |
|---|---|
| Organization | Your organization name at Hablame. |
| Public endpoint URL | https (recommended) or http, up to 2,048 characters and reachable from the internet. Private or reserved IP addresses, localhost and names ending in . or . are not accepted. |
| Short code | The short code whose SMS you want to receive. Each short code is named: an endpoint only receives the codes registered for it. |
| Technical contact | Name and email of the person on your team in charge of the integration. |
Never send us secrets
Not your full API key, an SMPP password or a signing secret. Your organization name is enough to identify your account.
Before you request registration
- Your URL responds 2xx to a
POSTin less than 15 s. - Your code verifies the signature and drops duplicates. You can start from the example receivers.
- The URL is not followed through redirects: it must be the final one. A
301or302counts as a failure.
Your signing secret
When the endpoint is registered, you get its signing secret in Cloud: whsec_ followed by 48 hexadecimal characters. It is shown only once and cannot be retrieved again. Keep it in your secrets manager or an environment variable; never in code or in the browser. Each endpoint has its own.
After registration
- Notifications can take up to 30 seconds to start arriving.
- SMS that reached your short code before registration are not stored or delivered later. Request registration before you promote the short code.
Suspend, rotate or change the endpoint
Every change is requested the same way, at developers@hablame.co: suspending notifications, changing the URL or the short code, or rotating the secret.
Rotate without losing notifications
During the 24 hours after a rotation, each notification is signed twice: X-Hablame-Signature with the new secret and X-Hablame-Signature-Prev with the previous one. This lets you switch yours whenever it suits you. Verify signatures.