Webhook Processing System Architecture
The Webhook Processing System ingests real-time events from Meta WhatsApp Cloud API v22.0, including incoming customer messages, delivery receipts, and status changes.
Webhook Processing Lifecycle
Rendering diagram...
HMAC SHA-256 Verification
Meta encrypts the HTTP request body using HMAC SHA-256 signed with the tenant's Meta App Secret:
python
def verify_signature(payload_bytes: bytes, signature_header: str, app_secret: str) -> bool:
expected_sig = hmac.new(
app_secret.encode('utf-8'),
msg=payload_bytes,
digestmod=hashlib.sha256
).hexdigest()
return hmac.compare_digest(f"sha256={expected_sig}", signature_header)
Message Status Tracking Lifecycles
Rendering diagram...