Docs
Webhooks
Receive referral and reward lifecycle events in real time and verify each webhook with HMAC-SHA256 signatures.
X-Webhook-Signature: <hmac_sha256_hex>
Use raw request body for signature verification.
Compare signatures with constant-time checks.