E-signature provider webhook

POST/api/v1/webhooks/esign

Inbound envelope-event receiver for the e-signature provider (DocuSign Connect). Deliveries are authenticated by HMAC-SHA256 signature over the raw body; unsigned or mis-signed deliveries get 403. Envelope completed marks the order signed; declined and voided are recorded. Redeliveries are idempotent.

Operation ID: esign_webhook_api_v1_webhooks_esign_post·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Responses

200Successful Response

Schema: ESignWebhookAck

statusstringrequired: processed, duplicate, or ignored.
envelope_idstring

400Bad Request - Invalid input

403Forbidden - Insufficient permissions

Code samples

POST/api/v1/webhooks/esign

bash

curl -X POST 'https://api.ondayzero.com/api/v1/webhooks/esign' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID'