| name | akeneo-webhooks |
| description | Receive and verify Akeneo PIM (Events API) webhooks. Use when setting up Akeneo webhook handlers, debugging x-akeneo-request-signature verification, or handling batched product and product-model events like product.created, product.updated, product.removed, product_model.created, product_model.updated, or product_model.removed.
|
| license | MIT |
| metadata | {"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"} |
Akeneo Webhooks
When to Use This Skill
- Setting up Akeneo PIM Events API webhook handlers
- Debugging
x-akeneo-request-signature verification failures
- Understanding Akeneo event types and the batched
events payload
- Handling product and product-model created/updated/removed events
Verification (core)
Akeneo has no official SDK — verify manually. Each request carries two headers:
x-akeneo-request-signature — hex HMAC-SHA256x-akeneo-request-timestamp — Unix seconds
The signed content is timestamp + "." + rawBody. Compute the HMAC with your
connection secret and compare, timing-safe, against the header. Use the
raw request body — don't JSON.parse first. Reject stale requests
(now - timestamp > 300) to prevent replay.
