Billdog Io Webhooks

generated: '2026-11-02'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://billdog.io/docs/auth/webhooks.md
sources:
- https://billdog.io/docs/auth/webhooks.md
- https://billdog.io/docs/webhooks.md
- https://billdog.io/docs/webhooks
- https://billdog.io/docs/auth/webhooks
description: BillDog Auth webhooks deliver thirteen authentication and organization events to configured endpoints.
events:
- event: user.created
  description: Emitted when a new user signs up.
- event: user.updated
  description: Emitted when a user's profile is updated.
- event: user.deleted
  description: Emitted when a user account is deleted.
- event: user.banned
  description: Emitted when a user is banned.
- event: user.unbanned
  description: Emitted when a previously banned user is unbanned.
- event: session.created
  description: Emitted when a new session (e.g., device login) is created.
- event: session.revoked
  description: Emitted when a session is revoked.
- event: organization.created
  description: Emitted when a new organization is created.
- event: organization.updated
  description: Emitted when an organization’s details are updated.
- event: organization.deleted
  description: Emitted when an organization is deleted.
- event: organization.membership.created
  description: Emitted when a user is added to an organization.
- event: organization.membership.updated
  description: Emitted when an organization membership is updated.
- event: organization.membership.deleted
  description: Emitted when a user is removed from an organization.
delivery:
  signature: X-BillDog-Signature
  content_type: application/json (implicit from payload examples) and X-BillDog-Timestamp header for replay protection. Signature is HMAC‑SHA256
    over "{timestamp}.{body}" using the endpoint secret. During secret rotation both old and new secrets are accepted for 24 h; the header may
    list both signatures as `v1,<hex> v1,<hex>`.
note: The secret is generated per endpoint and shown only once; it can be regenerated, keeping the old secret valid for 24 h.
docs: https://billdog.io/docs/auth/webhooks.md