akeneo-webhooks

name	akeneo-webhooks
description	Receive and verify Akeneo PIM (Events API) webhooks. Use when setting up Akeneo webhook handlers, debugging x-akeneo-request-signature verification, or handling batched product and product-model events like product.created, product.updated, product.removed, product_model.created, product_model.updated, or product_model.removed.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

Akeneo Webhooks

When to Use This Skill

• Setting up Akeneo PIM Events API webhook handlers
• Debugging x-akeneo-request-signature verification failures
• Understanding Akeneo event types and the batched events payload
• Handling product and product-model created/updated/removed events

Verification (core)

Akeneo has no official SDK — verify manually. Each request carries two headers:

• x-akeneo-request-signature — hex HMAC-SHA256
• x-akeneo-request-timestamp — Unix seconds

The signed content is timestamp + "." + rawBody. Compute the HMAC with your connection secret and compare, timing-safe, against the header. Use the raw request body — don't JSON.parse first. Reject stale requests (now - timestamp > 300) to prevent replay.