Webhooks

Webhooks

Webhooks let you receive real-time HTTP notifications from Qualflare when events happen in your project. Use webhooks to trigger custom automation, sync data to external systems, or notify services that don't have a native integration.

Managing Webhooks

Webhooks are configured per project at Project Settings → Webhooks.

Creating a Webhook

1. Go to Project Settings → Webhooks
2. Click New Webhook
3. Enter:
   • URL — the HTTPS endpoint to receive the webhook payload
   • Events — which events should trigger this webhook (see Events below)
4. Click Save

The webhook status badge shows Active when enabled.

Webhook Events

Payload Format

Qualflare sends an HTTP POST request to your webhook URL with a JSON body. Example payload:

{
  "event": "launch.completed",
  "timestamp": "2026-04-01T12:00:00Z",
  "projectSlug": "my-project",
  "data": {
    "launchSeq": 42,
    "totalCases": 120,
    "passed": 115,
    "failed": 5
  }
}

Enabling and Disabling

Use the toggle on each webhook row to enable or disable it without deleting the configuration.

Request Headers

Every webhook delivery includes:

Only https:// endpoints are accepted (on port 443 or 8443) — plain HTTP webhook URLs aren't supported.

Verifying Signatures

Each webhook has its own signing secret, generated automatically and shown exactly once, in a toast, immediately after you create it. Copy it somewhere safe — it can't be viewed again afterward (only regenerated by recreating the webhook).

To verify a delivery is genuinely from Qualflare, compute an HMAC-SHA256 digest of the raw request body using your secret, and compare it — as a constant-time comparison, not === — against the X-Webhook-Signature header, which is formatted as sha256=<hex-digest>:

import crypto from 'node:crypto';

function isValidSignature(rawBody, signatureHeader, secret) {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signatureHeader),
    Buffer.from(expected),
  );
}

Security

See Also

• Integrations Overview
• CI/CD Integration
• Project Settings Reference