WebhookTrigger NodeTypeCode: webhook-trigger

When to Use

• Payment processor callbacks: Stripe, PayPal, or Braintree posts a payment.succeeded or charge.failed event to your webhook URL. The workflow immediately captures the payload, validates the HMAC signature, and routes to fulfilment or refund processing nodes.
• GitHub push and pull-request hooks: GitHub delivers a push event on every commit to main. The workflow extracts the repository, branch, and commit SHA, then triggers CI pipeline steps or deployment nodes downstream.
• CRM lead notifications: HubSpot or Salesforce posts a lead-created event the moment a new contact is captured. The workflow enriches the record, assigns it to a sales rep based on territory, and sends a Slack notification to the team channel.
• IoT device events: Embedded sensors POST telemetry data at irregular intervals. The workflow stores readings, checks thresholds, and fires alerts when values exceed safe limits — all in real time without polling.
• Third-party SaaS integration events: Any SaaS tool that supports webhook delivery — Shopify order placement, Twilio inbound SMS status, PagerDuty incident creation — can drive a workflow without polling loops or scheduled pulls.

Configuration

Output Ports

Output Fields

On the main port, all InputData (the HTTP request body parsed as JSON) is passed through unchanged. The trigger node appends these system fields:

Sample Configuration

{
  "nodeType": "webhook-trigger",
  "settings": {
    "WebhookSecret": "whsec_a7b3c9d2e5f1234567890abcdef",
    "RequireBody": true,
    "RequiredFields": "event,data.orderId,data.customerId"
  }
}

Sample Output

Success Port

{
  "headers": {
    "content-type": "application/json",
    "x-webhook-source": "shopify",
    "x-shopify-hmac-sha256": "abc123...",
    "user-agent": "Shopify-Webhooks/1.0"
  },
  "body": {
    "id": 820982911946154508,
    "email": "jon@example.com",
    "total_price": "409.94",
    "currency": "USD",
    "fulfillment_status": null,
    "line_items": [
      { "id": 866550311766439020, "title": "IPod Nano - 8gb", "quantity": 1, "price": "199.00" }
    ]
  },
  "queryParams": {
    "source": "shopify",
    "event": "orders/create"
  },
  "method": "POST",
  "path": "/webhooks/trigger/wf_order_created",
  "receivedAt": "2025-03-15T12:30:00.000Z",
  "requestId": "req_abc123xyz"
}

Expression Reference

After the WebhookTrigger fires, downstream nodes reference the payload using the node's output name as set in FlowStudio (shown here as webhookTrigger).

Node Policies & GuardRails

Pattern Examples

Pattern 1 — Stripe Payment Webhook with Signature Verification

Stripe posts payment_intent.succeeded events signed with HMAC-SHA256. The workflow verifies the signature, normalizes the payload to an internal schema, and routes to fulfilment.

// WebhookTrigger settings
{
  "WebhookSecret": "whsec_your_stripe_webhook_signing_secret",
  "RequireBody": true,
  "RequiredFields": "type,data.object.id,data.object.amount,data.object.currency"
}

// Downstream VariableAssignment — capture idempotency key
{
  "VariableName": "stripeEventId",
  "Value": "{{ $output.webhookTrigger.id }}"
}

// Downstream DataMapping — normalize to internal order payment schema
{
  "Mappings": [
    { "SourceField": "data.object.id",             "TargetField": "paymentIntentId" },
    { "SourceField": "data.object.amount",         "TargetField": "amountCents",    "Transform": "toInt" },
    { "SourceField": "data.object.currency",       "TargetField": "currency",       "Transform": "uppercase" },
    { "SourceField": "data.object.metadata.orderId", "TargetField": "internalOrderId" }
  ]
}

Pattern 2 — GitHub Push Hook for Deployment Trigger

GitHub delivers a push event on every commit. The workflow filters for main-branch pushes, captures the commit SHA, and initiates a deployment pipeline.

// WebhookTrigger settings
{
  "WebhookSecret": "github_webhook_secret_abc123",
  "RequireBody": true,
  "RequiredFields": "ref,repository.full_name,head_commit.id"
}

// Downstream IfCondition — only process commits to main branch
// Condition expression:
"{{ $output.webhookTrigger.ref }}" === "refs/heads/main"

// Downstream VariableAssignment — store commit SHA for deployment
{
  "VariableName": "deployCommitSha",
  "Value": "{{ $output.webhookTrigger.head_commit.id }}"
}

Pattern 3 — IoT Sensor Alert with Field Validation

Edge devices POST temperature and humidity readings. Validation ensures required fields are present. A downstream CodeExecute node checks thresholds and routes an alert if readings are out of range.

// WebhookTrigger settings (no secret — internal network, IP-restricted)
{
  "RequireBody": true,
  "RequiredFields": "deviceId,temperature,humidity,timestamp"
}

// Downstream CodeExecute — threshold check
var data = input;
var alert = false;
var reason = "";
if (data.temperature > 85) {
  alert = true;
  reason = "Temperature exceeded 85C on device " + data.deviceId;
}
if (data.humidity > 95) {
  alert = true;
  reason = reason + " Humidity exceeded 95% threshold.";
}
result = { alert: alert, reason: reason.trim(), deviceId: data.deviceId };