Skip to main content
POST
/
api
/
public
/
apps
/
{appId}
/
events
/
order
Order event
curl --request POST \
  --url https://api.vambe.me/api/public/apps/{appId}/events/order \
  --header 'Content-Type: application/json' \
  --header 'x-vambe-signature: <x-vambe-signature>' \
  --header 'x-vambe-timestamp: <x-vambe-timestamp>' \
  --data '
{
  "order": {
    "external_id": "<string>",
    "external_name": "<string>",
    "currency": "<string>",
    "total_price": 1,
    "status_url": "<string>",
    "details_url": "<string>",
    "customer": {
      "name": "<string>",
      "phone": "<string>",
      "email": "<string>"
    },
    "line_items": [
      {
        "external_product_id": "<string>",
        "quantity": 4503599627370495
      }
    ],
    "metadata": {}
  }
}
'
Push a created or updated order. Vambe resolves the installation from appId (and external_store_id for multi-store apps) and routes the order into the standard ecommerce pipeline.
Every webhook must be signed: send x-vambe-signature (hex HMAC-SHA256 of ${x-vambe-timestamp}.${rawBody} using the app signing secret) and x-vambe-timestamp (unix epoch seconds). Requests older than 5 minutes are rejected.

Headers

​
x-vambe-timestamp
string
required

Unix epoch seconds when the request was signed. Requests older than 5 minutes are rejected.

​
x-vambe-signature
string
required

Hex HMAC-SHA256 of ${x-vambe-timestamp}.${rawBody} using the app signing secret.

Path Parameters

​
appId
string
required

Body

application/json
​
order
object
required
​
external_store_id
string
​
event_id
string

Response

201 - undefined