What is a Webhook?
A webhook is an HTTP request sent by one system to notify another that an event occurred. Reliable implementations verify signatures, tolerate retries, and process duplicate deliveries idempotently.
How Webhooks work
A webhook producer serializes an event and sends it to a consumer-controlled HTTP endpoint, decoupling asynchronous state changes from polling. Delivery is normally at least once rather than exactly once, because a lost response leaves the sender unable to know whether processing succeeded. The receiver therefore authenticates the original request, records an event identity, acknowledges promptly, and moves expensive media or business work to a durable queue.
Key facts
- 1Providers define exactly what is signed: some sign the raw request bytes plus a timestamp, while Transloadit sends an HMAC of the
transloaditfield in its multipart notification, computed with your Auth Secret. Verify the payload the provider defines, never a reserialized version of it. - 2Returning a success response only after lengthy downstream work increases timeouts and retries; persisting the event before acknowledging allows processing to continue asynchronously.
- 3Retries can duplicate or reorder events, so the event identifier and current resource version are safer guards for side effects than assuming each endpoint call is unique.
When Webhooks matter
Webhooks can continue application logic when asynchronous media processing completes or fails. Consumers must authenticate requests and avoid repeating side effects when the sender retries an event.