Webhooks
Webhooks let your backend receive 8BALL events as they happen.
Setup
Create a webhook endpoint in the developer console, choose event types, and save the signing secret when it is shown.
Signature Header
Webhook requests use an HMAC SHA-256 signature over timestamp.body.
8ball-signature: t=1760000000,v1=<hex-signature>
Reject requests with old timestamps or invalid signatures.