Content webhooks

content.published, content.unpublished, and installation connection.test. Payload: { id, event, siteId, environment, occurredAt, data: { id, collection, slug, published, version } }; test events have empty data. X-Buckhy-Content-Id is a stable delivery identifier.

Read the raw request body. X-Buckhy-Content-Signature contains t=<unix seconds>,v1=<hex signature>. Compute HMAC-SHA256 over ${t}.${rawBody} using your signing secret. Reject old timestamps (for example, outside five minutes) and compare equal-length signature bytes with a constant-time comparison. Do not parse and reserialize the body before verification.

A 2xx response acknowledges delivery. Network errors, 429 and 5xx are retried automatically, at most eight attempts with exponential delays starting at 30 seconds and capped at one hour. Other HTTP errors require a manual retry. The event payload and delivery ID remain unchanged; make your consumer idempotent. Installation test events are not automatically retried. A changed webhook URL cancels old queued events; publish again for the new destination.

Inspect status, HTTP response, attempts and next retry in Activity > Delivery. Cancel stops future attempts; requests already in flight may arrive. Rotate signing secrets in website Settings > Delivery > Content. The replacement is shown once and signs subsequent attempts immediately. Without a webhook, publishing updates the API directly and the website sees it on its next read.