Core concepts
Webhooks
Signed deliveries, retry policy, replay, and DLQ.
6 min read
FormsDock signs every webhook delivery with HMAC-SHA256. Verify the signature before trusting the payload.
Signature header
http
X-FormsDock-Signature: sha256=4f7a8c...Retry policy
Exponential backoff up to 24 hours. After 24 hours, the delivery lands in the dead-letter queue, visible in the dashboard.
Always respond with a 2xx status within 5 seconds. Slow handlers cause retries even on success.