← Spec Hub | Category: Developer APIs
Technical guide for receiving and processing automated n8n ➔ Vectorizer.AI Webhook Pipeline Specification event notifications. Follow these security guidelines to prevent unauthorized webhook calls.
Supported Events: resource.created resource.updated resource.deleted event.triggered
Security validation specs for n8n ➔ Vectorizer.AI Webhook Pipeline Specification endpoints:
X-Webhook-Signature-256: sha256=e17394b469f755f643a6e89e7704d756
const crypto = require('crypto');
const expected = crypto.createHmac('sha256', secret).update(rawBody).digest('hex');
const isValid = crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
import hmac, hashlib
expected = hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
is_valid = hmac.compare_digest(expected, incoming_sig)
{
"id": "evt_n8n-to-vectorizer.html_61884",
"event": "resource.created",
"created_at": 1789764056,
"data": {
"resource_id": "res_950",
"status": "active"
}
}
curl -X POST https://your-domain.com/webhook/n8n-to-vectorizer.html \
-H "Content-Type: application/json" \
-H "X-Webhook-Signature-256: sha256=e17394b469f755f643a6e89e7704d756" \
-d '{"id": "evt_n8n-to-vectorizer.html_61884", "event": "resource.created", "created_at": 1789764056, "data": {"resource_id": "res_950", "status": "active"}}'
| Status Code | Status Meaning | Integration Action |
|---|---|---|
200 OK | Success | Event payload validated and queued. |
400 Bad Request | Malformed Payload | Check payload structure and JSON formatting. |
401 Unauthorized | Signature Mismatch | Verify secret key and digest computation. |
500 Error | Server Error | Triggers provider automated retry backoff. |
Always process incoming events asynchronously using a message queue. Never perform long-running DB queries or external API calls synchronously within the HTTP response handler.
Failed deliveries (non-2xx responses) trigger an exponential backoff retry schedule over a period ranging from 24 to 72 hours.
A 429 status indicates your endpoint is being rate limited. Implement dynamic throttling or increase consumer worker threads in your queue worker.
While signature verification is primary, restricting traffic to published origin IP ranges adds a robust layer of perimeter security.