Requirements in Masnet
Before configuring the receiving system, prepare the destination in Masnet. The steps are the same for every system.
- Open Company › Integrations (the Spanish interface labels it Empresa › Integraciones), go to the Destinations tab and select New destination. If the integration has no authorized data yet, Masnet asks you to authorize it first.
- In Destination address (https) enter the receiver public URL. It must be
https, port 443 or 8443 and a public DNS name: user information in the URL, fragments, IP addresses and internal names are not accepted. A query string is allowed; Masnet treats the whole URL as a credential. - In Format choose Standard JSON (
application/json) or Structured CloudEvents (application/cloudevents+json). The event content is the same; see Webhooks. - Select Create destination. Masnet shows the signing secret (
whsec_…) only once. Store it immediately in the receiver secret store; it cannot be read again. - Select Test destination and then Send test. The integration is activated only after a successful test; then use Activate destination.
Architecture
Writing to HubSpot
The CRM API v3 creates a contact with POST https://api.hubapi.com/crm/v3/objects/contacts and a JSON body with properties (and associations); it answers 201 with the created object. Other objects follow the same pattern in the HubSpot API reference. Authentication is configured according to the HubSpot authentication documentation.
{
"properties": {
"email": "[email protected]",
"firstname": "Example",
"lastname": "Surname"
},
"associations": []
}Masnet events are about contracts, guarantees, tenders and other management objects, not contacts. Define custom properties in HubSpot to store, for example, the Masnet identifier and the contract code, and map from data.object. The property names are a decision of your organization.
Response
The intermediary answers 2xx to Masnet after verifying the signature and queuing the work. The call to HubSpot must be made asynchronously.
Testing with the test event
- Send the test from Masnet with Test destination and Send test.
- Check that the intermediary verifies the signature and does not write to HubSpot for
com.masnet.integration.test.v1.
Operation: duplicates and ordering
- Idempotency.
webhook-ididentifies the event and is kept across retries and redeliveries. Record the identifiers already processed and discard repeats with a 2xx response. - Ordering. Each resource (
subject) carries an increasingsequence. Discard an event whosesequenceis lower than or equal to the last one applied for thatsubject. Events of different resources have no order between them. - Retries. Masnet retries any non-2xx response for up to 72 hours; the full schedule is in Webhooks.
- Secret rotation. When rotating with overlap, the previous secret stays valid for 24 hours and
webhook-signaturecarries twov1,…signatures separated by a space. Accept the event if either one matches.
Troubleshooting
Masnet records the response code of each attempt in the delivery history. These are the effects of each receiver response:
| Receiver response | Effect in Masnet |
|---|---|
| 2xx | Successful delivery. It means receipt, not business processing. |
| 3xx | The redirect is not followed. It counts as a failure and is retried; the history shows the Location without its query string. |
| 400, 401, 403, 404 and other 4xx or 5xx | Retryable failure for up to 72 hours from the start of the delivery cycle. |
| 410 | Masnet disables the destination and cancels pending deliveries. Return 410 only if the destination must stop receiving events. |
| 413 | The event is marked as undeliverable to that destination and is not retried. |
429 or 503 with Retry-After | Retry-After (seconds or HTTP date) is honored up to a maximum of 1 hour. |
| No response within 15 seconds | Timeout (5 s to connect, 15 s in total). It is a retryable failure: answer 2xx and process asynchronously. |
| HubSpot error on create or update | Fix the mapping; the intermediary should have answered 2xx earlier. Reconcile with the data API. |