openapi: 3.0.0

info:
  title: Webhooks
  version: 1.0.0
  description: |
    Service for configuring webhooks on different events

tags:
  - name: webhooks
    description: Configure and trigger webhooks

paths:
  /v1/webhooks/configured-events:
    get:
      operationId: getConfiguredEvents
      summary: getConfiguredEvents
      description: Retrieve events that can trigger webhooks
      tags:
        - webhooks
      responses:
        200:
          description: Success - configured events loaded with success. Empty array if no events have been configured.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/EventConfigResp"
  # Results
  /v1/webhooks/configs:
    get:
      operationId: getConfigs
      summary: getConfigs
      description: Search Webhook Client Configs
      tags:
        - webhooks
      parameters:
        - in: query
          name: eventName
          schema:
            type: string
          required: false
          description: Filter configurations by event Name
          example: customer_request_created
      responses:
        200:
          description: Success - configs loaded with success. Empty array if org has configs.
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: "#/components/schemas/WebhookConfig"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
    post:
      operationId: createConfig
      summary: createConfig
      description: Create Webhook Client Config
      tags:
        - webhooks
      requestBody:
        description: Webhook config payload
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/WebhookConfig"
      responses:
        201:
          description: Success - if the config is created successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/WebhookConfig"

        400:
          description: Validation Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        401:
          description: Authentication Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
  /v1/webhooks/configs/{configId}:
    get:
      operationId: getConfig
      summary: getConfig
      description: Get webhook config by id
      tags:
        - webhooks
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
      responses:
        200:
          description: Success - if the config is updated successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/WebhookConfig"
        404:
          description: No configuration found for this id
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
    put:
      operationId: updateConfig
      summary: updateConfig
      description: Update Webhook Client Config
      tags:
        - webhooks
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid (length 6) to identify the webhook configuration.
          example: 7hj28a
      requestBody:
        description: Webhook config payload
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/WebhookConfig"
      responses:
        200:
          description: Success - if the config is updated successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/WebhookConfig"
        400:
          description: Validation Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        401:
          description: Authentication Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
    delete:
      operationId: deleteConfig
      summary: deleteConfig
      description: Delete Webhook Client Config
      tags:
        - webhooks
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Id of the config to de deleted.
          example: CustomerRequest
      responses:
        204:
          description: Success - if the config is deleted successfully
        401:
          description: Failed to authenticate
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        404:
          description: No config found
  /v1/webhooks/configs/{configId}/failures:
    get:
      operationId: getFailuresForConfig
      deprecated: true
      summary: getFailuresForConfig
      description: Get failed deliveries for a given config id
      tags:
        - webhooks
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
        - in: query
          name: lastLoadedEventId
          schema:
            type: string
          required: false
          description: Optional Key. To be provided when loading paginated data. It is always returned initially by this API, if pagination is needed.
          example: 1f143bd2-f816-4d7d-b33d-056db6e1ef7b
        - in: query
          name: lastLoadedTimestamp
          schema:
            type: string
          required: false

      responses:
        200:
          description: Success
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/FailuresResp"
        404:
          description: No configuration found for this id
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
                
  /v1/webhooks/failures:
    get:
      deprecated: true
      operationId: getFailures
      summary: getFailures
      description: Get saved failures from the webhooks DB, in a paginated way
      tags:
        - webhooks
      parameters:
        - in: query
          name: lastLoadedEventId
          schema:
            type: string
          required: false
          description: Optional Key. To be provided when loading paginated data. It is always returned initially by this API, is pagination is needed.
          example: 1f143bd2-f816-4d7d-b33d-056db6e1ef7b
        - in: query
          name: lastLoadedTimestamp
          schema:
            type: string
          required: false
          description: Optional Key. To be provided when loading paginated data. It is always returned initially by this API, is pagination is needed.
          example: "2021:05:06T12:00:26.000Z"
      responses:
        200:
          description: Success - if the API call returned successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/FailuresResp"
        400:
          description: Validation Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        401:
          description: Authentication Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
  /v1/webhooks/failures/resend:
    post:
      deprecated: true
      operationId: resendFailure
      summary: resendFailure
      description: Resend payload for one failure
      tags:
        - webhooks
      requestBody:
        description: Resend payload
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/FailureEntry"
      responses:
        204:
          description: Success - Payload has been resend
        401:
          description: Authentication Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
  /v1/webhooks/configs/{configId}/trigger:
    post:
      operationId: triggerWebhook
      summary: triggers a webhook event either async or sync
      description: Trigger a webhook
      tags:
        - webhooks
        - trigger
      parameters:
        - in: query
          name: sync
          description: If set to true, the webhook will be triggered synchronously. Otherwise, it will be triggered asynchronously.
          schema:
            type: boolean
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
            
      requestBody:
        description: Webhook payload
        required: true
        content:
          application/json:
            schema: 
             $ref: "#/components/schemas/ExecutionPayload"

      responses:
        200:
          description: Success - if the webhook is triggered successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/TriggerWebhookResp"
        400:
          description: Validation Errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
  /v1/webhooks/configs/{configId}/events:
    get:
      operationId: getWehookEvents
      summary: getWehookEvents
      description: Get sent events for a given webhook config
      tags:
        - webhooks
        - events
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
        - in: query
          name: status
          schema:
            type: string
            enum:
            - succeeded
            - failed
            - in_progress
          description: Get all events for a given webhook config id
          example: succeeded
        - in: query
          name: cursor
          schema:
            type: string
          required: false
          description: Base64 encoded cursor to be used for pagination
      responses:
        200:
          description: Success - list events
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      $ref: "#/components/schemas/WebhookEvent"
                  cursor:
                    type: string
                    description: Cursor to be used for pagination
        404:
          description: No events found
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
  /v1/webhooks/configs/{configId}/events/{eventId}:
    get:
      operationId: getEventById
      summary: getEventById
      description: Get a webhook event by its id
      tags:
        - webhooks
        - event
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
        - in: path
          name: eventId
          schema:
            type: string
          required: true
          description: Event id
      responses:
        200:
          description: Success - event
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/WebhookEvent"
        404:
          description: No events found
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"

  /v1/webhooks/configs/{configId}/events/{eventId}/replay:
    post:
      operationId: replayEvent
      summary: replayEvent
      description: Replay a webhook event
      tags:
        - webhooks
        - event
      parameters:
        - in: path
          name: configId
          schema:
            type: string
          required: true
          description: Short uuid to identify the webhook configuration.
          example: 7hj28aasgag2gha2
        - in: path
          name: eventId
          schema:
            type: string
          required: true
          description: Event id
      responses:
        204:
          description: Success - replay event
        404:
          description: No events found
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
        500:
          description: Other errors
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResp"
components:
  schemas:
    HttpMethod:
      type: string
      enum:
        - GET
        - POST
        - PUT
        - PATCH
        - DELETE
        - OPTIONS
        - HEAD

    AuthType:
      type: string
      enum:
        - BASIC
        - OAUTH_CLIENT_CREDENTIALS
        - API_KEY

    Filter:
      type: object
      properties:
        keyToFilter:
          type: string
        supportedValues:
          type: array
          items:
            type: string
      required:
        - keyToFilter
        - supportedValues

    Auth:
      type: object
      properties:
        authType:
          $ref: "#/components/schemas/AuthType"
        basicAuthConfig:
          $ref: "#/components/schemas/BasicAuthConfig"
        oauthConfig:
          $ref: "#/components/schemas/OAuthConfig"
        apiKeyConfig:
          $ref: "#/components/schemas/ApiKeyConfig"
      required:
        - authType

    BasicAuthConfig:
      type: object
      description: To be sent only if authType is BASIC
      properties:
        username:
          type: string
        password:
          type: string
      required:
        - username

    OAuthConfig:
      type: object
      description: To be sent only if authType is OAUTH_CLIENT_CREDENTIALS
      properties:
        clientId:
          type: string
        clientSecret:
          type: string
        endpoint:
          type: string
          description: Https Endpoint for authentication
        httpMethod:
          $ref: "#/components/schemas/HttpMethod"
        customParameterList:
          type: array
          items:
              $ref: "#/components/schemas/CustomOAuthParameter"
      required:
        - clientId
        - endpoint
        - httpMethod

    ApiKeyConfig:
      type: object
      description: To be sent only if authType is API_KEY
      properties:
        keyName:
          type: string
        keyValue:
          type: string
      required:
        - keyName

    WebhookConfig:
      type: object
      properties:
        id:
          type: string
          readOnly: true
        name:
          type: string
        eventName:
          type: string
        url:
          type: string
        creationTime:
          type: string
          description: creation timestamp
          example: "2021-04-27T12:01:13.000Z"
        httpMethod:
          $ref: "#/components/schemas/HttpMethod"
        enabled:
          type: boolean
        auth:
          $ref: "#/components/schemas/Auth"
        filter:
          $ref: "#/components/schemas/Filter"
        payloadConfiguration:
          $ref: "#/components/schemas/PayloadConfiguration"
        enableStaticIP:
          type: boolean
        status:
          type: string
          enum:
            - active
            - inactive
            - incomplete
        jsonataExpression:
          type: string
          description: JSONata expression to transform the payload
        _manifest:
          type: array
          description: Manifest ID used to create/update the entity
          items:
            type: string
            format: uuid
            example: 123e4567-e89b-12d3-a456-426614174000
      required:
        - name
        - eventName

      example:
        eventName: CustomerRequest_Created
        url: https://my-partner-service.api.com
        httpMethod: POST
        enabled: true
        auth:
          authType: BASIC
          basicAuthConfig:
            username: secretUsername
            password: secret7825@!
        filter:
          keyToFilter: customer_request.productId
          supportedValues:
            - "2324245"
            - "5253642"

    EventConfigResp:
      type: array
      items:
        $ref: '#/components/schemas/EventConfigEntry'
      example:
        - eventName: customer_request_created
          eventLabel: Customer Request Created

    EventConfigEntry:
      type: object
      properties:
        eventName:
          type: string
          description: Name for identifying the event. Unique.
        eventLabel:
          type: string
          description: Either a user friendly label, or the eventName itself.

    FailureLastKey:
      type: object
      description: Key of last loaded item previously returned via paginated response
      properties:
        orgId:
          type: string
        eventId:
          type: string
        creationTimestamp:
          type: string 
        webhookConfigId:
          type: string

    FailuresResp:
      type: object
      description: Response for get errors request.
      properties:
        lastLoadedKey:
          $ref: '#/components/schemas/FailureLastKey'
        failures:
            type: array
            items:
              $ref: '#/components/schemas/FailureEntry'
      required:
        - failures
      example:
        failures:
          - eventName: customer_request_created,
            eventId: 12e8726b-071b-4c42-9221-8caae0d14863
            errorCode: '502'
            webhookConfigId: kreauMGUr55nDoVviaaBLG
            creationTimestamp: '2021-04-13T17:43:40.576Z'
            orgId: '728'
            errorPayload: Failed to store data
            url: https://63b2de56be27.ngrok.io
            payload:
              metadata:
                action: created
                creation_timestamp: '2021-04-13T17:43:40.576Z'
                event_name: customer_request_created
                object: customer_request
                organization_id: '728'
                version: '1.0.0'
              customer_request:
                id: TEST
                payment_details:
                  account_owner_name: Test
                  bank_name: Test Bank
                  bic: BIC
                  iban: IBAN
                  payment_method: sepa
                request_items:
                  - id: TEST
                    otherProp1: test1
                    otherProp2: test2
          - eventName: customer_request_created
            eventId: fc51a730-9730-4b55-8aa1-dd6d66b7e3e2
            errorCode: '404'
            webhookConfigId: xrExypA8HBWEtK9AXfU2de
            creationTimestamp: '2021-04-13T17:43:40.576Z'
            orgId: '728'
            errorPayload: Tunnel ef68038e3af9.ngrok.io not found
            url: https://ef68038e3af9.ngrok.io
            payload:
              metadata:
                action: created
                creation_timestamp: '2021-04-13T17:43:40.576Z'
                event_name: customer_request_created
                object: customer_request
                organization_id: '728'
                version: '1.0.0'
              customer_request:
                id: TEST
                payment_details:
                  account_owner_name: Test
                  bank_name: Test Bank
                  bic: BIC
                  iban: IBAN
                  payment_method: sepa
                request_items:
                  - id: TEST
                    otherProp1: test1
                    otherProp2: true
        lastLoadedKey:
          orgId: 6122
          eventId: fc51a730-9730-4b55-8aa1-dd6d66b7e3e2
          creationTimestamp: "2022:01:01T00:00:00.000Z"

    FailureEntry:
      type: object
      description: Failures stored in the database.
      properties:
          orgId:
            type: string
            description: The ID of the given organization
          eventId:
            type: string
            description: ID of event. Unique
          eventName:
            type: string
            description: Name for identifying the event. Unique.
          creationTimestamp:
            type: string
            description: Time of event creation
          payload:
            type: object
            description: Contains the metadata about the configured event
          webhookConfigId:
            type: string
            description: The ID of the webhook configuration
          errorCode:
            type: string
          errorPayload:
            type: string
            description: The error message encountered during webhook delivery
          url:
            type: string
            description: destination url of configured webhook

    ErrorResp:
      type: object
      properties:
        message:
          type: string

    TriggerWebhookResp:
      type: object
      properties:
        status_code:
          type: string
        message:
          type: string
        body:
          type: object
        code:
          type: string
        status:
          type: string
          enum:
            - succeeded
            - failed
        start_date:
          type: string
        end_date:
          type: string
        event_id:
          type: string

    PayloadConfiguration:
      type: object
      description: Configuration for the webhook payload
      properties:
        hydrate_entity:
          type: boolean
        include_relations:
          type: boolean
        include_activity:
          type: boolean 
        include_changed_attributes:
          type: boolean
        custom_headers:
          $ref: "#/components/schemas/CustomHeader"

    CustomHeader:
      type: object
      description: Object representing custom headers as key-value pairs.
      additionalProperties:
        type: string
        description: Header value
  
    CustomOAuthParameter:
      type: object
      description: Custom key/value pair of either type body, query or header
      properties:
        type:
          type: string
          enum:
            - body
            - query
            - header
        key:
          type: string
        value:
          type: string 
      required:
        - type
        - key
        - value

    Metadata:
      type: object
      description: Contains the metadata about the configured event
      properties:
        action:
          type: string
          description: Action that triggered the event
          example: "Manual triggered by user with id 123456"
        origin:
          type: string
          description: Origin of the event
        creation_timestamp:
          type: string
          description: Time of event creation
        webhook_id:
          type: string
          description: The ID of the webhook configuration
        webhook_name:
          type: string
          description: The name of the webhook configuration
        automation_name:
          type: string
          description: The name of the automation that triggered the event
        organization_id:
          type: string
          description: The ID of the given organization
        user_id:
          type: string
          description: The ID of the user for manual triggered events
        correlation_id:
          type: string
          description: ID used to track the event
        execution_id:
          type: string
          description: When triggered by an automation this is its execution id
        action_id:
          type: string
          description: When triggered by an automation this is the id of the action
      required:
        - organization_id

    ExecutionPayload:
      type: object
      description: Payload for triggering a webhook
      properties:
        metadata:
          $ref: "#/components/schemas/Metadata"
      required:
        - metadata

    WebhookEvent:
      type: object
      properties:
        event_id:
          type: string
        org_id:
          type: string
        webhook_config_id:
          type: string
        url:
          type: string
        created_at:
          type: string
          example: "2021-04-27T12:01:13.000Z"
        event_name:
          type: string
        http_response:
          type: object
          properties:
            status_code:
              type: integer
            message:
              type: string
            body:
              type: object
            code:
              type: string
        metadata:
          $ref: "#/components/schemas/Metadata"
        status:
          type: string
          enum:
            - succeeded
            - failed
            - in_progress
        http_method:
          type: string
          enum:
            - GET
            - POST
            - PUT
        payload:
          type: string
          description: stringified payload of the webhook request

      required:
        - event_id
        - webhook_config_id
        - org_id

  securitySchemes:
    EpilotAuth:
      type: http
      scheme: bearer
      description: Authorization header with epilot OAuth2 bearer token
      bearerFormat: JWT
security:
  - EpilotAuth: []
servers:
  - url: 'https://webhooks.sls.epilot.io'