21.2 Required Request Format

Endpoint: POST /api/integrations/events

Required Headers:

Authorization: Bearer {your_tenant_api_token}
X-ArtinCRM-Timestamp: {UTC ISO-8601 or Unix timestamp}
X-ArtinCRM-Nonce: {unique nonce for this request}
X-ArtinCRM-Signature: {HMAC-SHA256 signature}

Signature Calculation: The signature is an HMAC-SHA256 over:

{timestamp}\n{nonce}\n{raw_request_body}

Using the raw Bearer token value as the HMAC key. The result is lowercase hex, optionally prefixed with sha256=.

Required JSON Body Fields:

{
  "provider": "woocommerce",
  "connection": {
    "externalInstanceId": "your-store-id"
  },
  "eventType": "order.completed",
  "externalEventId": "unique-event-id-12345",
  "payload": {
    // any additional event data
  }
}