Download the PHP package cleaniquecoders/laravel-config-webhook without Composer

Laravel Config Webhook

Define, sign, dispatch and log outgoing webhooks in any Laravel app. Subscribers register a URL, a secret, and the event types they care about; when one of those events fires, the package delivers an HMAC-signed JSON payload with automatic retries and exponential backoff, and records every attempt in a delivery log. Ships with an optional Livewire + Flux admin UI.

The package is completely app-agnostic — it knows nothing about your domain. You register your own event catalogue (via config or at runtime) and either dispatch payloads manually or map your domain events to webhook types.

Features

• 🔌 Outgoing webhooks — per-subscriber URL, secret, subscribed events, custom headers
• 🔏 HMAC-SHA256 signatures — every request is signed; helpers to verify incoming ones too
• 🔁 Retries with exponential backoff — configurable base/multiplier, full delivery log
• 🧾 Delivery logs — status, HTTP code, response time, attempt, error, response body
• 🧩 Config- or runtime-driven event catalogue — no hardcoded domain events
• 🖥️ Optional Livewire + Flux admin UI — works headless without it
• 🔐 Secrets encrypted at rest, configurable authorization gate, configurable user model
• ✅ Laravel 12 & 13, PHP 8.3+

Requirements

• PHP 8.3+
• Laravel 12 or 13
• (Optional, for the admin UI) livewire/livewire ^3 || ^4 and livewire/flux

Installation

The service provider and ConfigWebhook facade are auto-discovered — no manual registration needed.

Publish and run the migrations:

Publish the config:

Optionally publish the views (to customise the Flux UI):

The optional admin UI requires livewire/livewire and livewire/flux. The service, job, and signing all work without them.

Configuration

Register the event types your app can emit, either in config/config-webhook.php:

…or at runtime (e.g. in a service provider's boot()):

Usage

1. Dispatch a payload manually

Fan a payload out to every active webhook subscribed to the event type:

The receiver gets:

2. Map a domain event (auto-dispatch)

Wire a domain event to a webhook type once and the package dispatches automatically whenever the event fires:

3. Verifying signatures on the receiving side

Admin UI

Enable the bundled full-page route in config/config-webhook.php:

Or drop the Livewire component anywhere in your own layout:

Restrict access with a gate:

Pruning logs

How it works

Testing

The suite includes a true end-to-end test (tests/EndToEndTest.php) that mirrors how a consuming app uses the package: a domain event is mapped with ConfigWebhook::listen(), a subscriber webhook is created, the event is fired, and the queued job runs on the sync queue to deliver a signed HTTP request — asserting both the outgoing request and the recorded delivery log.

Local development (try it in a real app)

The package ships an Orchestra Testbench Workbench setup (testbench.yaml + workbench/) — a real Laravel app, pre-seeded so it works end-to-end out of the box:

Then exercise the full pipeline:

• GET /webhooks — the bundled Livewire admin UI (needs livewire/flux installed to render)
• GET /fire — dispatches the sample OrderShipped domain event
• GET /received — the in-app subscriber endpoint shows the signed payload it received ("verified": true), and the delivery log in the UI shows status=success, http=200

workbench/app/Providers/WorkbenchServiceProvider.php shows exactly how a host app registers its event catalogue and maps a domain event to a webhook type; workbench/routes/web.php includes a /receiver endpoint that verifies the HMAC signature.

The demo delivers on a database queue, so a queue:work worker must be running. In your own app you can deliver synchronously by setting the queue connection to sync.

Documentation

Full documentation lives in docs/:

• Architecture — how it works, components, delivery lifecycle
• Development — getting started, usage, testing, workbench
• Configuration — every config key
• API Reference — manager, signatures, payload & headers
• Releasing — versioning and publishing

Changelog

Please see CHANGELOG for more information on what has changed recently.

Credits

• Nasrul Hazim Bin Mohamad
• All Contributors

This package was extracted and generalised from the G8Stack webhook integrations feature.

License

The MIT License (MIT). Please see License File for more information.