Next-Gen Webhook
Execution Engine

Configuration File

Hookwal reads configurations from a local config.toml file. Below are the supported keys:

# Hookwal configuration template
port = "8080"
db_path = "hookwal.db"
admin_token = "super-secret-admin-token"
master_key = "32-byte-hexadecimal-key-for-credentials-encryption"
max_body_size = 1048576       # 1MB limit in bytes
allow_private_ips = false      # Enforce SSRF blocking

POST /hook/{token}

Ingests JSON payloads for a specific webhook. Validates schemas, HMAC signature keys, and rate limits.

Headers

Interactive Code Snippet

curl -X POST http://localhost:8080/hook/token_ad88bae856b224abcc8676adff58b825 \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: idemp_123" \
  -d '{
    "name": "Alex",
    "email": "alex@binlogic.com",
    "message": "Scale check"
  }'

fetch('http://localhost:8080/hook/token_ad88bae856b224abcc8676adff58b825', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Idempotency-Key': 'idemp_123'
  },
  body: JSON.stringify({
    name: 'Alex',
    email: 'alex@binlogic.com',
    message: 'Scale check'
  })
})
.then(res => res.json())
.then(data => console.log(data));

package main

import (
	"bytes"
	"net/http"
)

func main() {
	payload := []byte(`{"name": "Alex", "email": "alex@binlogic.com"}`)
	req, _ := http.NewRequest("POST", "http://localhost:8080/hook/token_ad88bae856b224abcc8676adff58b825", bytes.NewBuffer(payload))
	req.Header.Set("Content-Type", "application/json")
	
	client := &http.Client{}
	client.Do(req)
}

POST /form/{token}

Ingests URL-encoded static form data. Filters bots through honeypots and validates CAPTCHAs before scheduling executions.

HTML Integration Boilerplate

<!-- Hookwal public form integration -->
<form action="http://localhost:8080/form/token_ad88bae856b224abcc8676adff58b825" method="POST">
  <!-- Hidden Honeypot Input -->
  <input type="text" name="bot-field" style="display:none" autocomplete="off" />

  <label>Name</label>
  <input type="text" name="name" required />

  <label>Email</label>
  <input type="email" name="email" required />

  <!-- Cloudflare Turnstile token container -->
  <div class="cf-turnstile" data-sitekey="your-site-key"></div>

  <button type="submit">Send Message</button>
</form>

POST /admin/hooks

Registers a new webhook endpoint. Protect with Bearer token authentication.

Request Payload Schema

{
  "name": "Contact Lead Form",
  "allowed_domains": ["binlogic.com"],
  "honeypot_field": "bot-field",
  "captcha_secret": "0xMockSecretKey",
  "rate_limit_limit": 10,
  "rate_limit_window_ms": 60000,
  "validation_schema": "{\"email\":{\"type\":\"string\",\"required\":true,\"format\":\"email\"}}",
  "actions": [
    {
      "type": "postgres_insert",
      "config": "{\"credentials_id\": \"conn_supabase\", \"table\": \"leads\"}"
    }
  ]
}

POST /admin/events/{id}/replay

Triggers a manual replay of a previously stored event, cloning payload inputs and scheduling brand new executions.

Successful Response (201 Created)

{
  "status": "queued",
  "event_id": "event_new_replay_12345",
  "parent_event_id": "event_original_failed_9988"
}

GET /admin/jobs/{id}

Inspects execution records and outputs for a specific event pipeline.

Health Checks & Metrics

Hookwal provides diagnostic routes for system state visibility:

Confirms runtime binary execution. Returns 200 OK.

Confirms SQLite connection and write-read viability. Returns 200 OK or 503 Service Unavailable.

Exposes real-time Prometheus statistics on request volume, queue depths, execution latencies, and worker pools.