Webhooks

Forma's Plus plan allows you to setup a custom "webhook" notification endpoint. This is perfect for writing custom integrations and managing data in your own way.

When Forma triggers the webhook, it will include the submission and any form data as part of the payload.

Here's an example:

{
    "data": {
        "submission": {
            "uuid": "submission-uuid-here",
            "reply_to": "demo@useforma.app",
            "subject": "New Submission - Demo App",
            "created_at": "2021-05-27 10:51:27",
            "fields": {
                "name": "Ryan Chandler",
                "email": "demo@useforma.app",
                "message": "Hey! This is an example webhook payload."
            }
        }
    }
}

Verifying webhooks

It's common practice for webhooks to send a signature inside of a custom header so that you can verify their origin.

Forma sends a signature through the X-Forma-Signature header. You can retreive the value of this header inside of your webhook handler and compare it to the signature found under the "Settings" tab for your form.