Create partner pharmacy webhook

Parameter

partnerOrgIdstring (uuid)pathErforderlich

Partner-controlled pharmacy identifier from the registration call.

Beispiel: pharmacy-4711

X-Correlation-IDstringheader

Optional opaque request correlation ID for tracing API calls across systems. Billing audit paths persist only UUIDv4-shaped values and drop free-form values.

Beispiel: 33333333-3333-4333-8333-333333333333

authobject

Optional OAuth2 client-credentials configuration for receivers that expect bearer-authenticated deliveries instead of the default HMAC-signed mode. Omit entirely to keep HMAC signing.

auth.clientIdstringErforderlich

OAuth2 client identifier.

Beispiel: akflow-webhook-client

auth.clientSecretstringErforderlich

OAuth2 client secret. Write-only: accepted on creation, stored encrypted, and never included in any response.

Beispiel: <CLIENT_SECRET>

auth.modestringErforderlich

Fixed delivery auth mode discriminator.

Beispiel: OAUTH2_CLIENT_CREDENTIALS

auth.scopestring

Optional OAuth2 scope sent as the `scope` form parameter on the token request. Set it when the partner channel requires a specific scope value for webhook deliveries.

Beispiel: webhooks:deliver

auth.tokenUrlstringErforderlich

HTTPS token endpoint for the client-credentials grant. Subject to the same SSRF host restrictions as the webhook url.

Beispiel: https://auth.partner.example/oauth2/token

eventsarrayErforderlich

Subscribed partner events. This enum is derived from the authoritative ALLOWED_PARTNER_WEBHOOK_EVENTS constant (partner-webhooks.service.ts), so it cannot drift from the values the API actually accepts.

Beispiel: ["appointment.created","appointment.cancelled"]

urlstringErforderlich

HTTPS receiver URL. IP literals, localhost and cluster-internal hosts are rejected.

Beispiel: https://webhooks.partner.example/akflow