Webhooks

Endpoint

Inbound webhook receivers (webhook-ingestor service)

Meta webhook verification

GET

https://api-chat.bara.my.id

/webhook

Handles the Meta verification challenge handshake.

Meta webhook verification › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification › Responses

Challenge echoed back

string

Receive Meta webhook (WhatsApp + Instagram)

POST

https://api-chat.bara.my.id

/webhook

Validates HMAC-SHA256 signature, stores audit record in MongoDB, and produces event to channel.inbound.raw Kafka topic.

Receive Meta webhook (WhatsApp + Instagram) › Headers

X-Hub-Signature-256

string · required

sha256= computed with Meta App Secret

Receive Meta webhook (WhatsApp + Instagram) › Request Body

Receive Meta webhook (WhatsApp + Instagram) › Responses

Webhook accepted

No data returned

Receive inbound email webhook

POST

https://api-chat.bara.my.id

/webhook/email

Compatible with SendGrid Inbound Parse (JSON mode). Signature verification is optional (skipped if EMAIL_WEBHOOK_SECRET is not set).

Receive inbound email webhook › Headers

X-Email-Webhook-Signature

string

HMAC-SHA256 signature (optional)

Receive inbound email webhook › Request Body

from

string · required

Sender email (supports 'Name ' format)

to

string

subject

string

text

string

Plain text body

html

string

HTML body

message_id

string

sender_name

string

object[]

Receive inbound email webhook › Responses

Email webhook accepted

No data returned

POST/webhook/email

curl --request POST \
  --url https://api-chat.bara.my.id/webhook/email \
  --header 'Content-Type: application/json' \
  --data '
{
  "from": "from",
  "to": "to",
  "subject": "subject",
  "text": "text",
  "html": "html",
  "message_id": "message_id",
  "sender_name": "sender_name",
  "attachments": [
    {
      "filename": "filename",
      "content_type": "content_type",
      "url": "url"
    }
  ]
}
'

shell

Example Request Body

{
  "from": "from",
  "to": "to",
  "subject": "subject",
  "text": "text",
  "html": "html",
  "message_id": "message_id",
  "sender_name": "sender_name",
  "attachments": [
    {
      "filename": "filename",
      "content_type": "content_type",
      "url": "url"
    }
  ]
}

json

Example Responses

No example specified for this content type

Meta webhook verification for Messenger

GET

https://api-chat.bara.my.id

/webhook/messenger

Handles the Meta verification challenge handshake for Messenger.

Meta webhook verification for Messenger › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification for Messenger › Responses

Challenge echoed back

string

Receive Messenger inbound webhook events

POST

https://api-chat.bara.my.id

/webhook/messenger

Validates HMAC-SHA256 signature (X-Hub-Signature-256), resolves integration account by page_id, and produces event to Kafka.

Receive Messenger inbound webhook events › Headers

X-Hub-Signature-256

string · required

sha256= computed with Meta App Secret

Receive Messenger inbound webhook events › Request Body

Receive Messenger inbound webhook events › Responses

Webhook accepted

No data returned

Meta webhook verification for Instagram

GET

https://api-chat.bara.my.id

/webhook/instagram

Handles the Meta verification challenge handshake for Instagram.

Meta webhook verification for Instagram › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification for Instagram › Responses

Challenge echoed back

string

Receive Instagram inbound webhook events

POST

https://api-chat.bara.my.id

/webhook/instagram

Validates HMAC-SHA256 signature (X-Hub-Signature-256) using the Instagram app secret, resolves integration account by ig user_id, and produces event to Kafka.

Receive Instagram inbound webhook events › Headers

X-Hub-Signature-256

string · required

sha256= computed with Instagram App Secret

Receive Instagram inbound webhook events › Request Body

Receive Instagram inbound webhook events › Responses

Webhook accepted

No data returned

WA Templates Roles

OmniStream CRM API

Webhooks

Endpoint

Inbound webhook receivers (webhook-ingestor service)

Meta webhook verification

GET

https://api-chat.bara.my.id

/webhook

Handles the Meta verification challenge handshake.

Meta webhook verification › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification › Responses

Challenge echoed back

string

Receive Meta webhook (WhatsApp + Instagram)

POST

https://api-chat.bara.my.id

/webhook

Validates HMAC-SHA256 signature, stores audit record in MongoDB, and produces event to channel.inbound.raw Kafka topic.

Receive Meta webhook (WhatsApp + Instagram) › Headers

X-Hub-Signature-256

string · required

sha256= computed with Meta App Secret

Receive Meta webhook (WhatsApp + Instagram) › Request Body

Receive Meta webhook (WhatsApp + Instagram) › Responses

Webhook accepted

No data returned

Receive inbound email webhook

POST

https://api-chat.bara.my.id

/webhook/email

Compatible with SendGrid Inbound Parse (JSON mode). Signature verification is optional (skipped if EMAIL_WEBHOOK_SECRET is not set).

Receive inbound email webhook › Headers

X-Email-Webhook-Signature

string

HMAC-SHA256 signature (optional)

Receive inbound email webhook › Request Body

from

string · required

Sender email (supports 'Name ' format)

to

string

subject

string

text

string

Plain text body

html

string

HTML body

message_id

string

sender_name

string

object[]

Receive inbound email webhook › Responses

Email webhook accepted

No data returned

POST/webhook/email

curl --request POST \
  --url https://api-chat.bara.my.id/webhook/email \
  --header 'Content-Type: application/json' \
  --data '
{
  "from": "from",
  "to": "to",
  "subject": "subject",
  "text": "text",
  "html": "html",
  "message_id": "message_id",
  "sender_name": "sender_name",
  "attachments": [
    {
      "filename": "filename",
      "content_type": "content_type",
      "url": "url"
    }
  ]
}
'

shell

Example Request Body

{
  "from": "from",
  "to": "to",
  "subject": "subject",
  "text": "text",
  "html": "html",
  "message_id": "message_id",
  "sender_name": "sender_name",
  "attachments": [
    {
      "filename": "filename",
      "content_type": "content_type",
      "url": "url"
    }
  ]
}

json

Example Responses

No example specified for this content type

Meta webhook verification for Messenger

GET

https://api-chat.bara.my.id

/webhook/messenger

Handles the Meta verification challenge handshake for Messenger.

Meta webhook verification for Messenger › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification for Messenger › Responses

Challenge echoed back

string

Receive Messenger inbound webhook events

POST

https://api-chat.bara.my.id

/webhook/messenger

Validates HMAC-SHA256 signature (X-Hub-Signature-256), resolves integration account by page_id, and produces event to Kafka.

Receive Messenger inbound webhook events › Headers

X-Hub-Signature-256

string · required

sha256= computed with Meta App Secret

Receive Messenger inbound webhook events › Request Body

Receive Messenger inbound webhook events › Responses

Webhook accepted

No data returned

Meta webhook verification for Instagram

GET

https://api-chat.bara.my.id

/webhook/instagram

Handles the Meta verification challenge handshake for Instagram.

Meta webhook verification for Instagram › query Parameters

hub.mode

string · enum · required

Enum values:

hub.challenge

string · required

hub.verify_token

string · required

Meta webhook verification for Instagram › Responses

Challenge echoed back

string

Receive Instagram inbound webhook events

POST

https://api-chat.bara.my.id

/webhook/instagram

Validates HMAC-SHA256 signature (X-Hub-Signature-256) using the Instagram app secret, resolves integration account by ig user_id, and produces event to Kafka.

Receive Instagram inbound webhook events › Headers

X-Hub-Signature-256

string · required

sha256= computed with Instagram App Secret

Receive Instagram inbound webhook events › Request Body

Receive Instagram inbound webhook events › Responses

Webhook accepted

No data returned

WA Templates Roles