Source type
OpenAI Source Configuration
OpenAI sources receive API event webhooks such as response, batch, and fine-tuning lifecycle notifications using Standard Webhooks signatures.
OpenAI configuration
Create a OpenAI source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Webhook Signing Secret values for provider signature. FastHook uses these settings to validate each OpenAI delivery before it enters the routing workflow.
Source TypeOPENAI
Allowed methodsPOST, PUT, PATCH, DELETE
AuthenticationProvider signature
Credential fieldsWebhook Signing Secret
{
"type": "OPENAI",
"config": {
"auth_type": "PROVIDER_SIGNATURE",
"auth": {
"provider": "OPENAI",
"webhook_signing_secret": "whsec_..."
},
"allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
}
}OpenAI request contract
FastHook verifies webhook-signature over webhook-id + '.' + webhook-timestamp + '.' + raw body using the configured Standard Webhooks secret.
OpenAI headers
Preserve webhook-id, webhook-timestamp, webhook-signature when sending OpenAI test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.
webhook-idMessage id used in the Standard Webhooks signed payload.
webhook-timestampUnix timestamp used for replay protection and signature input.
webhook-signatureOne or more Standard Webhooks signatures.
OpenAI setup
- Create an OpenAI webhook endpoint with the generated FastHook Source URL.
- Copy the OpenAI webhook signing secret into FastHook.
- Route by event type when response, batch, or fine-tuning events should reach different destinations.
OpenAI routing hints
- OpenAI lifecycle callbacks can branch by payload type so response, batch, and fine-tuning notifications reach different operational workflows.
- Use webhook-id for delivery-level deduplication and keep the API object identifier for later status lookups or support investigation.