POST/billing/revenuecat/webhook
Receive a RevenueCat webhook
Operation billing.revenuecat.webhook.receive
Description
Receives subscription lifecycle events from RevenueCat and applies them to organization billing. The caller is RevenueCat, authenticated by the shared secret in the Authorization header rather than by a session. An event the server cannot apply yet is answered with 503 and left unclaimed, so RevenueCat redelivers it.
Authentication
No session is required.
Parameters
| Name | In | Type | Details |
|---|---|---|---|
authorization | header | string | optional |
Request body
application/jsonRevenueCatWebhookRequest
The envelope RevenueCat posts to the billing webhook.
2 fields
api_versionstringoptional
Other fields are allowed.
Responses
200 OK
application/jsonRevenueCatWebhookResponse
Acknowledges a RevenueCat delivery.
2 fields
receivedbooleanrequired- always
true
- always
outcomestringrequired- one of
applied,duplicate,ignored
appliedwhen billing changed,duplicatefor an event id already handled,ignoredwhen it needed no change.- one of
Other fields are allowed.
Other responses
| Status | Meaning | Body |
|---|---|---|
| 400 | Bad Request |
|
| 401 | Unauthorized |
|
| 500 | Internal Server Error |
|
| 503 | Service Unavailable |
|
Additional rules
The server also enforces these rules, which the schema above cannot express.
Authorization must match the configured RevenueCat webhook secret in constant time.