Waa maxay Webhook? Sida app-yadu isugu wargeliyaan

Webhook waa fariin otomaatig ah oo hal adeeg u diro app-kaaga isla markaaba marka wax dhaco. Marka lacag-bixinta macaamil guuleysato, Stripe wuxuu webhook u diraa cinwaan ku yaal app-kaaga oo leh “lacag-bixinta waa guuleysatay, halkan faahfaahinta”, app-kaaguna wuu falcelinayaa — dalabka wuu calaamadinayaa in la bixiyay, risiidh buu diraa, akoonka buu furaa. Kooban: API waa markii app-kaagu adeeg kale su’aal weydiiyo; webhook waa markii adeegga kale uu app-kaaga wacayo si uu wax ugu sheego.

Maxaa loogu muhiimsan yahay markaad AI-dhisaysa

Intii aad app-ku lacag ka qaadayso, foomo ka soo gaarayo qalab kale, ama ku xirmayso adeegyo sida GitHub, Shopify ama calendar, waxaad la kulmi doontaa webhooks. Badanaa waa habka saxda ah ee lagu ogaado in wax dhacay — laakiin sidoo kale waa meesha app-yada AI lagu dhisay inta badan ay si qarsoodi ah khaldamaan:

• Endpoint-ku wuxuu aqbalaa codsi kasta, sidaas darteed qof kasta wuu been ugu diri karaa dhacdada “lacag-bixinta waa guuleysatay”.
• App-ku wuxuu siiyaa galitaanka bogga checkout-ka redirect-ka oo ku saleysan halkii webhook-ka, sidaas darteed dadka tabka xidha hore ma helaan waxa ay bixiyeen, dadka helaya URL-ka guusha ayaa bilaash u helaya.
• Isla dhacdadu waxay ku timaadaa laba jeer, macmiilna wuxuu helaa labo dalab ama labo email.

Sida webhooks u shaqeeyaan waxay kaa caawinaysaa inaad codsato ilaalinta horaantii.

Tusaale maalinlaha ah: fariinta dhir-dhirka

Waxaad heli kartaa in parcel-kaagu yimid laba siyaabood. Waxaad sii socon kartaa albaabka hore kulli toban daqiiqo si aad u hubiso (taas waa polling — app-kaagu si joogto ah ugu wacayo API si uu u weydiiyo “wax cusub ma jiraa?”). Ama kooxda gaadiidka ayaa kugu qoraysa fariin markay gaarto (taas waa webhook).

Fariinta ayaa si cad ka wanaagsan — hadday kugu kalsoonaan karto. Haddii qof kasta uu kuu diri karo fariin “parcel waa la gaarsiiyay”, waxaad doonaysaa hab aad ku ogaato in ay runtii ka timid kooxda gaadiidka. Haddii telefoonkaagu damaacay markii fariintu timid, waxaad doonaysaa in kooxdu mar kale isku dayto goor dambe. Labadan arrimood — xaqiijinta iyo dib-u-isku-dayga — waa inta badan waxa webhooks adag.

Sida webhook u shaqeeyo, tallaabo-tallaabo

1. Waxaad abuurtaa endpoint backend-ka app-kaaga: cinwaan sida https://yourapp.com/webhooks/stripe oo aqbala codsiyada POST.
2. Cinwaankaas waxaad diiwaangelisaa bixiyaha oo waxaad doorataa dhacdooyinka aad rabto (tusaale, “checkout la dhammeeyay” iyo “subscription la joojiyay”).
3. Bixiyuhu wuxuu siiyaa signing secret. Waad kaydisaa secret ahaan server-kaaga — eeg environment variables iyo secrets.
4. Dhacdo ayaa dhacda. Bixiyuhu wuxuu u diraa codsi HTTP ah cinwaankaaga oo leh JSON body oo sharxaysa dhacdada, iyo header saxiix ah.
5. App-kaagu wuxuu xaqiijiyaa saxiixa, wuxuu diiwaangelinayaa event ID-ga, wuxuu dib ugu jawaabayaa koodka guusha (200) si degdeg ah, kadibna wuu shaqada qabanayaa.
6. Haddii app-kaagu jawaab guusha ah ma celin, bixiyayaasha badani way mar kale isku dayaan goor dambe.

Saxiixyada

Saxiixu wuxuu caddeynayaa in codsigu ka yimid bixiyaha oo aan la beddelin. Stripe, tusaale ahaan, wuxuu xisaabiyaa HMAC (nooc ka mid ah farta-fudud ee furaha lagu saxiixo) oo leh SHA-256 jirka codsiga iyo waqtiga, isagoo isticmaalaya signing secret-ka, wuxuuna ku diraa header-ka Stripe-Signature. App-kaagu wuxuu sameeyaa isla xisaabtaas isagoo isticmaalaya nuqulkiisa secret-ka; haddii natiijooyinku isku mid yihiin, codsigu waa dhab. Waqtiga oo sidoo kale la saxiixay, waxaad diidi kartaa codsiyo duug ah oo qof duubay oo dib u ciyaaro — dokumentiga Stripe wuxuu sheegay in maktabadaha ay default ahaan ku yihiin dulqaad shan daqiiqo, sida ay u qoran tahay Sebtember 2026.

Faahfaahin dhab ah: saxiixa waxaa lagu xisaabiyaa jirka codsiga raw. Haddii frameworkkaagu JSON-ka falanqeeyo oo dib u habeeyo ka hor intaadan xaqiijin, hubintu way fashilanaysaa. Tani waa cillad aad caadi ahaan u dhacdo.

Dib-u-isku-dayga, nuqullada iyo dalbadeeda

Bixiyayaashu way kala duwan yihiin, sidaas darteed hubi dokumentiga mid kasta. Sida ay u qorantahay Sebtember 2026:

Dokumentiga Stripe wuxuu sidoo kale sheegayaa in dhacdooyinka aan lagu xaqiijin karin inay yimaadaan kala horreynta ay dhaceen, iyo in isla dhacdadu mararka qaarkood ku imaan karto laba jeer, sidaas darteed wuxuu talo siinayaa in la raaco event ID-yada.

Caddaynta guud ee ku habboon bixiye kasta: dhacdooyinka way imaan karaan daahay, laba jeer, iyo dalbo ka baxsan. Handler-kaagu waa inuu noqdaa idempotent — isla dhacdada oo laba jeer la farsameeyo waxay leedahay isla natiijo sida mar keliya la farsameeyey.

Tusaale shaqo: furinta koorsada lacag-bixinta

Waxaad iibinaysaa koorsada online ah. Ardaydu waxay riixaysaa Buy, wuxuuna ku bixiyaa bogga checkout-ka ee Stripe, oo wuxuu ku celiyaa websaydhkaaga.

Habka jilicsan: bogga “mahadsanid” ayaa furaya koorsada. Haddii ardaygu tabka xiro intii redirect-ku socday, wuu bixiyay laakiin ma helo galitaan. Haddii qof saadaaliyo URL-ka mahadsanid, galitaan ayuu helaa isagoo aan bixin.

Habka webhook-ka:

1. Markii Stripe xaqiijiyo lacag-bixinta, wuxuu u diraa dhacdada checkout.session.completed /webhooks/stripe.
2. Backend-kaagu wuxuu xaqiijiyaa saxiixa signing secret-ka. Haddii uu fashilmo, wuxuu ku jawaabaa 400 wax kalena ma sameeyo.
3. Wuxuu hubinayaa in event ID-gaas horey loo farsameeyey. Haddii haa, wuxuu ku jawaabaa 200 oo joogsadaa.
4. Wuxuu kaydinayaa event ID-ga, wuxuu ku jawaabaa 200, kadibna wuxuu siinayaa ardaygii galitaanka oo wuxuu u diraa email soo dhowaynta.
5. Bogga mahadsanid wuxuu kaliya sheegayaa “Lacag-bixintii waa la helay — koorsadaadu waa soo bixi doontaa wax yar dambe” wuxuuna hubiyaa xaaladda galitaanka ardayga.

Kadib, haddii subscription la joojiyo ama kaarka uu fashilmo, dhacdooyinka kale ee webhook-ka ayaa app-kaaga u sheegaya inuu galitaanka ka saaro ama joojiyo. Sidaas ayay subscription products ula jaan qaadaan billing-ka — eeg waa maxay SaaS iyo sida lacag-bixinta app-kaaga ku darto.

Ereyada muhiimka ah

• Endpoint: cinwaanka app-kaaga ee helo webhooks.
• Event / payload: waxa dhacay, iyo xogta sharaxda (badanaa JSON).
• Signing secret: furaha la wadaago ee loo xaqiijiyo saxiixyada.
• Idempotent: waa amni in la socodsiiyo laba jeer isla natiijo ahaan.
• Polling: si joogto ah u weydiinta API isbeddelada halkii aad sugi lahayd webhook.
• Tunnel: qalab cinwaan web ku-meel-gaar ah u siiya laptop-ka si webhooks uu ugu gaari karo intii horumarinta socotay.

Fahamka khaldan ee caadiga ah

• Saxiixyada oo aan la xaqiijin. Cinwaanka endpoint-ka ma aha sir. Xaqiijintu waa wax keenta in codsigu la isku halayn karo.
• Shaqo daahay ka hor jawaabta. Email-yo ama PDF-yo la abuuro ka hor jawaabta waxay keeni kartaa timeout, kaas oo keena dib-u-isku-day, kaas oo keena nuqullo.
• In la qaato inay mar keliya yimaadaan, si kala horreyn ah. Event ID-yada kaydi oo ha ku tiirsanaan imaanshaha kala horreynta.
• Isticmaalka URL preview. Webhooks waxay u baahan yihiin cinwaan joogto ah oo dadweyne. Preview gaar ah iyo localhost internet-ka laguma gaari karo; isticmaal URL-kaaga la daabacay (ama tunnel intii tijaabinta).
• Isku qasidda furayaasha tijaabada iyo kuwa dhabta ah. Bixiyayaashu badanaa signing secret-yo kala duwan ayay siiyaan test iyo live mode. Labadaba kaydi oo isticmaal midka saxda ah.
• Xogta ku kalsoonaanta oo indhaha laga xidhaa qaraarrada muhiimka ah. Qaraarrada khatarta leh, waa macquul in aad ka soo qaaddo heerka ugu dambeeya API-ga bixiyaha kadib markii aad dhacdada heshay.

Waxa aad ka codsanaysid AI builder-kaaga

Ku dar POST /webhooks/stripe endpoint server-ka. Xaqiiji saxiixa Stripe adigoo isticmaalaya jirka codsiga raw iyo secret-ka STRIPE_WEBHOOK_SECRET. Saxiixyada aan sax ahayn ku diid 400. Kaydi event ID kasta oo dhacdooyinka horey loo farsameeyey ka bood. Ku jawaab 200 si degdeg ah, kadibna maamul dhacdada checkout.session.completed adigoo dalabka calaamadinaya in la bixiyay oo risiidhka dirayo. Diiwaan geli nooca dhacdada. Ha siin galitaanka bogga guusha ee checkout-ka.

Kadib tijaabi: dhacdo tijaabo ah ka dir dashboard-ka bixiyaha, mar labaad isla mid ka dir, oo codsi saxiix khaldan ku dir. Midka koowaad kaliya ayaa wax beddelaya.

Webhooks ee Mythex

Mythex ma shaqeeyo adeeg webhooks gaar ah; waxaad AI agent-ka ka codsataa inuu ku daro endpoint webhook backend-ka app-kaaga, kadibna bixiyaha u tilmaan URL-kaaga la daabacay, maadaama webhooks ay u baahan yihiin cinwaan dadweyne. Signing secret-ka waxaa lagu rakaa project secrets, haddii aad beddesho secret-ka app nool, mar kale daabac. Docs recipe-ka handling webhooks wuxuu leeyahay starter prompt, store templates na waa bilow wanaagsan app-yada lacag qaadanaya.

Su'aalaha