Track A · Module 4 of 7

Push, not poll: webhooks, HMAC verification and per-member deadline digests

Subscribe to the eight OpenGrants webhook events, verify X-OpenGrants-Signature with Web Crypto, block replays, and send one useful digest per member.

13 min read · 5 min video

Confirm your email below to watch this lesson

Video length 3:44

A nightly polling job is late by up to a day and re-reads a dataset that mostly did not change. Webhooks invert that: OpenGrants tells your server when something changed, and your server does work only then. The part people underuse is the deadline event, because it is the difference between a portal that lists opportunities and one that tells a member to act this week.

This lesson covers the eight events, how to register an endpoint, how to verify the signature correctly (the documented sample has two traps), how to stop replays, and how to turn events into one digest email per member that people keep opening.

Continue the course

The course is free. Enter your email and we'll send you a confirmation link. Once you confirm, every module of Build a Funding Portal opens on this device.

Confirming adds you to this course's email list. You can unsubscribe at any time. Privacy policy.