Webhooks

​

Lifecycle

1. Register an endpoint with POST /v2/webhooks, supplying the URL and the event types you care about.
2. Receive events. LoyaltyDog signs each delivery and posts JSON to your endpoint.
3. Acknowledge with 2xx. Any other response triggers retry with exponential backoff.
4. Enable, disable, or delete the subscription as needed via /v2/webhooks/{webhookId}.

​

Event categories

• Customer lifecycle — created, updated, deleted
• Loyalty transactions — earn, redeem, adjust
• Gift cards — issued, redeemed, consolidated, voided
• Wallet passes — installed, removed, updated

​

Building a receiver

• Responds quickly. Acknowledge with 2xx immediately, then process asynchronously.
• Validates the signature. Every delivery includes a signature header derived from your webhook’s secret.
• Is idempotent. Treat the event ID as the dedup key — LoyaltyDog may redeliver during retries.
• Logs everything. You’ll need it the first time something goes wrong.

// Example: an Express receiver
app.post('/webhooks/loyaltydog', express.json(), (req, res) => {
  res.status(200).end();                    // ack first
  enqueueForProcessing(req.body);           // then process async
});

​

Retries