ReOTP.
Advanced Features/Webhooks Reference
1 min read

Webhooks Reference

Receive instant updates on verification events directly on your backend.

Instead of exhausting network and client resources with active HTTP polling, you can define a Webhook URL inside your project settings in the dashboard.

As soon as a user's phone number is verified, the ReOTP server sends a direct POST request containing the verification payload to your backend.

Secure Webhooks (Webhook Signature)

If you configure a webhook secret in the settings, we will include an x-webhook-signature header containing an HMAC SHA256 signature of the payload. You should compute the HMAC of the raw request body using your secret and compare it to this header to verify authenticity.

Integration Code (SDKs)
{
  "event": "verification.success",
  "phoneNumber": "+966500000000",
  "actualPhoneNumber": "+966500000000",
  "requestId": "cmrjpk97j0000okc514kfdkll",
  "projectId": "cmrjpk97j00...",
  "method": "WHATSAPP",
  "timestamp": "2026-07-17T12:00:00.000Z"
}

Interactive Live API Playground

Test verification requests live and generate integration code in your preferred programming language.

curl -X POST https://reotp.com/api/verify/init \
  -H "Authorization: Bearer 15a1c1c7-ed05-40df-b7c3-69c327542a07" \
  -H "Content-Type: application/json" \
  -d '{
    "phoneNumber": "201000000000",
    "method": "WHATSAPP"
  }'