Webhooks

PUT /api/v1/reseller/webhook

curl -X PUT "https://kennhosting.com/api/v1/reseller/webhook" \
  -H "Authorization: Bearer kh_live_YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://votre-site.cm/kh-webhook",
    "secret": "votre_secret_hmac"
  }'

{
  "success": true,
  "data": {
    "url": "https://votre-site.cm/kh-webhook",
    "has_secret": true
  }
}

GET /api/v1/reseller/webhook

{
  "success": true,
  "data": {
    "url": "https://votre-site.cm/kh-webhook",
    "has_secret": true
  }
}

POST /api/v1/reseller/webhook/test

{
  "success": true,
  "data": {
    "url": "https://votre-site.cm/kh-webhook",
    "status_code": 200,
    "delivered": true,
    "error": null
  }
}

X-KennHosting-Signature: sha256=HMAC(body, secret)

$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_KENNHOSTING_SIGNATURE'] ?? '';

$expected = 'sha256=' . hash_hmac('sha256', $payload, 'votre_secret_hmac');

if (!hash_equals($expected, $signature)) {
    http_response_code(401);
    exit('Signature invalide');
}

$event = json_decode($payload, true);
// Traiter $event['event']

{
  "event": "vps.activated",
  "sandbox": false,
  "timestamp": "2026-06-12T19:00:00Z",
  "data": {
    "client_id": 1,
    "order_uuid": "b1912d95-...",
    "server_id": 12345,
    "ipv4": "1.2.3.4",
    "status": "running"
  }
}