webhooks — CRM API

POST/api/crm/webhooks/apple

POST /api/crm/webhooks/apple — JWT fail-CLOSED → gzip → route(destination-id) → ingest/opt-out.

Herkese açık

İstek

curl -X POST "https://{slug}.crm.blesyum.app/api/crm/webhooks/apple" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

GET/api/crm/webhooks/meta

GET /api/crm/webhooks/meta — subscription verify (hub.challenge echo; verify_token rotation ring).

Herkese açık

İstek

curl -X GET "https://{slug}.crm.blesyum.app/api/crm/webhooks/meta" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/crm/webhooks/meta

POST /api/crm/webhooks/meta — imza doğrula → parse → route → ingest / dead-letter → 200.

Herkese açık

İstek

curl -X POST "https://{slug}.crm.blesyum.app/api/crm/webhooks/meta" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/crm/webhooks/meta/data-deletion

POST /api/crm/webhooks/meta/data-deletion (§16.7). Meta data-deletion-request → doğrula →

Herkese açık

erasure kuyruğu (P5 rutini; user↔asset map canlı CF14) + Meta'nın beklediği `{url, confirmation_code}` döner. App Review zorunlu callback.

İstek

curl -X POST "https://{slug}.crm.blesyum.app/api/crm/webhooks/meta/data-deletion" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/crm/webhooks/meta/deauthorize

POST /api/crm/webhooks/meta/deauthorize (§16.7). Meta `signed_request` ile kullanıcı app'i

Herkese açık

kaldırdı → doğrula (fail-CLOSED 401) → ilgili bağlantıları devre-dışı bırak (seam: user↔asset map canlı onboarding'de dolar, CF14) + log. App Review zorunlu callback.

İstek

curl -X POST "https://{slug}.crm.blesyum.app/api/crm/webhooks/meta/deauthorize" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/crm/webhooks/telegram/{routing_token}

POST /api/crm/webhooks/telegram/{routing_token} — secret-token fail-CLOSED → parse → ingest.

Herkese açıkYol parametresi: routing_token

İstek

curl -X POST "https://{slug}.crm.blesyum.app/api/crm/webhooks/telegram/<routing_token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}