aress
POST /v1/orders/webhook

Order webhook

Receives Shopify order creation webhooks and routes orders to source stores.

Receives a Shopify orders/create webhook and triggers the order routing pipeline. This endpoint is authenticated via HMAC signature verification — not JWT or API keys.

How it works

  1. Shopify sends the order payload with HMAC headers
  2. The platform verifies the signature against the reseller store’s webhook secret
  3. The full order is fetched from the Shopify API
  4. Line items are matched to source stores by vendor tag
  5. One sync job is enqueued per matched source store

The endpoint returns 200 OK immediately with an empty body — all processing happens asynchronously via BullMQ to stay within Shopify’s 5-second webhook timeout.

Required headers

HeaderDescription
X-Shopify-Hmac-SHA256Base64-encoded HMAC-SHA256 signature of the raw request body
X-Shopify-Shop-DomainOriginating Shopify shop domain (e.g. my-store.myshopify.com)

Responses

200

Response

200 200 OK
{
  "statusCode": 200,
  "message": ""
}