Vytvořit webhook

POST

catalog

webhooks

cURL

curl --request POST \
  --url https://app.productlasso.com/api/v1/catalog/webhooks \
  --header "Authorization: Bearer $LASSO_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
    "name": "ERP product sync",
    "url": "https://erp.example.com/webhooks/lasso",
    "events": ["product.created", "product.updated", "product.deleted"]
  }'

const response = await fetch("https://app.productlasso.com/api/v1/catalog/webhooks", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.LASSO_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "ERP product sync",
    url: "https://erp.example.com/webhooks/lasso",
    events: ["product.created", "product.updated", "product.deleted"],
  }),
});

if (!response.ok) throw new Error(await response.text());
const webhook = await response.json();
// Store webhook.secret now. It is returned only once.

import os
import requests

response = requests.post(
    "https://app.productlasso.com/api/v1/catalog/webhooks",
    headers={"Authorization": f"Bearer {os.environ['LASSO_API_KEY']}"},
    json={
        "name": "ERP product sync",
        "url": "https://erp.example.com/webhooks/lasso",
        "events": ["product.created", "product.updated", "product.deleted"],
    },
    timeout=30,
)
response.raise_for_status()
webhook = response.json()
# Store webhook["secret"] now. It is returned only once.

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "company_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "url": "<string>",
  "events": [
    "product.created"
  ],
  "enabled": true,
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z",
  "secret": "<string>",
  "description": "<string>"
}

{
  "status_code": 123,
  "error_type": "invalid_request",
  "message": "<string>",
  "request_id": "<string>",
  "code": "<string>",
  "retryable": true,
  "attribute_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "attribute_key": "<string>",
  "details": {},
  "current_updated_at": "2023-11-07T05:31:56Z"
}

{
  "status_code": 123,
  "error_type": "invalid_request",
  "message": "<string>",
  "request_id": "<string>",
  "code": "<string>",
  "retryable": true,
  "attribute_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "attribute_key": "<string>",
  "details": {},
  "current_updated_at": "2023-11-07T05:31:56Z"
}

Uložení podpisového tajemství

Odpověď 201 obsahuje secret právě jednou. Před zahozením odpovědi ho bezpečně uložte. Operace seznamu a aktualizace ho už nikdy nevrátí.

Produkční cíl musí používat veřejné HTTPS. Lasso ověřuje DNS a odmítá lokální, privátní a jinak nebezpečné cíle.
events musí obsahovat alespoň jednu jedinečnou podporovanou událost.
name je pro API klienty volitelné a výchozí hodnotou je hostname cíle.

Podpis ověřujte nad nezměněným tělem požadavku. Hlavičky, ověření podpisu, opakování a payloady popisuje Webhook katalogu.

Příklady

curl --request POST \
  --url https://app.productlasso.com/api/v1/catalog/webhooks \
  --header "Authorization: Bearer $LASSO_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
    "name": "ERP product sync",
    "url": "https://erp.example.com/webhooks/lasso",
    "events": ["product.created", "product.updated", "product.deleted"]
  }'

const response = await fetch("https://app.productlasso.com/api/v1/catalog/webhooks", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.LASSO_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "ERP product sync",
    url: "https://erp.example.com/webhooks/lasso",
    events: ["product.created", "product.updated", "product.deleted"],
  }),
});

if (!response.ok) throw new Error(await response.text());
const webhook = await response.json();
// Store webhook.secret now. It is returned only once.

import os
import requests

response = requests.post(
    "https://app.productlasso.com/api/v1/catalog/webhooks",
    headers={"Authorization": f"Bearer {os.environ['LASSO_API_KEY']}"},
    json={
        "name": "ERP product sync",
        "url": "https://erp.example.com/webhooks/lasso",
        "events": ["product.created", "product.updated", "product.deleted"],
    },
    timeout=30,
)
response.raise_for_status()
webhook = response.json()
# Store webhook["secret"] now. It is returned only once.

Example response

{
  "id": "f4146cf6-393e-411f-a93e-b62212e7b5c1",
  "company_id": "81e2b625-e6e8-4dd5-a50f-22803806cc10",
  "name": "ERP product sync",
  "url": "https://erp.example.com/webhooks/lasso",
  "events": ["product.created", "product.updated", "product.deleted"],
  "enabled": true,
  "description": null,
  "secret": "whsec_store_this_value_now",
  "created_at": "2026-08-31T09:40:00.000Z",
  "updated_at": "2026-08-31T09:40:00.000Z"
}

Autorizace

Authorization

string

header

povinné

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Tělo

application/json

url

string<uri>

povinné

Maximum string length: 2048

events

enum<string>[]

povinné

Minimum array length: 1

Dostupné možnosti:

product.created,

product.updated,

product.deleted,

attribute.created,

attribute.updated,

attribute.deleted

name

string

Optional for API clients; defaults to the destination hostname. The dashboard requires it.

Required string length: 1 - 120

description

string | null

Maximum string length: 500

Odpověď

Endpoint plus its one-time signing secret

string<uuid>

povinné

company_id

string<uuid>

povinné

name

string

povinné

Required string length: 1 - 120

url

string<uri>

povinné

HTTPS public destination. HTTP localhost is accepted only by local development servers.

events

enum<string>[]

povinné

Minimum array length: 1

Dostupné možnosti:

product.created,

product.updated,

product.deleted,

attribute.created,

attribute.updated,

attribute.deleted

enabled

boolean

povinné

created_at

string<date-time>

povinné

updated_at

string<date-time>

povinné

secret

string

povinné

One-time signing secret. It is never returned by later reads or updates.

description

string | null

Maximum string length: 500

cURL

curl --request POST \
  --url https://app.productlasso.com/api/v1/catalog/webhooks \
  --header "Authorization: Bearer $LASSO_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
    "name": "ERP product sync",
    "url": "https://erp.example.com/webhooks/lasso",
    "events": ["product.created", "product.updated", "product.deleted"]
  }'

const response = await fetch("https://app.productlasso.com/api/v1/catalog/webhooks", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.LASSO_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "ERP product sync",
    url: "https://erp.example.com/webhooks/lasso",
    events: ["product.created", "product.updated", "product.deleted"],
  }),
});

if (!response.ok) throw new Error(await response.text());
const webhook = await response.json();
// Store webhook.secret now. It is returned only once.

import os
import requests

response = requests.post(
    "https://app.productlasso.com/api/v1/catalog/webhooks",
    headers={"Authorization": f"Bearer {os.environ['LASSO_API_KEY']}"},
    json={
        "name": "ERP product sync",
        "url": "https://erp.example.com/webhooks/lasso",
        "events": ["product.created", "product.updated", "product.deleted"],
    },
    timeout=30,
)
response.raise_for_status()
webhook = response.json()
# Store webhook["secret"] now. It is returned only once.

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "company_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "url": "<string>",
  "events": [
    "product.created"
  ],
  "enabled": true,
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z",
  "secret": "<string>",
  "description": "<string>"
}

{
  "status_code": 123,
  "error_type": "invalid_request",
  "message": "<string>",
  "request_id": "<string>",
  "code": "<string>",
  "retryable": true,
  "attribute_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "attribute_key": "<string>",
  "details": {},
  "current_updated_at": "2023-11-07T05:31:56Z"
}

{
  "status_code": 123,
  "error_type": "invalid_request",
  "message": "<string>",
  "request_id": "<string>",
  "code": "<string>",
  "retryable": true,
  "attribute_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "attribute_key": "<string>",
  "details": {},
  "current_updated_at": "2023-11-07T05:31:56Z"
}

Přehled

Vyhledávání

Obohacení dat

Tabulky

Řádky

Obohacení

Schémata

Atributy

Soubory

Slovník

Kredity

Produktová analytika

Katalog

Webhooky katalogu

Vytvořit webhook

Uložení podpisového tajemství

Příklady

Autorizace

Tělo

Odpověď

​Uložení podpisového tajemství

​Příklady

Autorizace

Tělo

Odpověď

Uložení podpisového tajemství

Příklady