Client points changed

This is not an endpoint of the Fodimi API. Fodimi sends this request to the URL you configure
in the panel under Integracje → Webhooki. Every delivery, with its payload and your response,
is listed in Logi wysyłek.
Loyalty points or stamps were added or deducted.

Payload rule: deliveries carry identifiers and the change only — no items, no amounts, no personal data.
Fetch what you need with GET /orders/{uid} or GET /clients/{uid}.

Headers on every delivery

Header	Meaning
`X-Fodimi-Event`	event name
`X-Fodimi-Delivery`	delivery id, identical across retries — use it to skip duplicates
`X-Fodimi-Timestamp`	unix time used in the signature
`X-Fodimi-Signature`	`t=<timestamp>,v1=<hex>`, where `v1 = HMAC_SHA256(secret, t + "." + rawBody)`

Verifying the signature (PHP)

Rules

Answer with any 2xx as fast as you can and do the work asynchronously — the timeout is 10 s.

Failed deliveries are retried after 10 s, 1 min and 5 min. 20 failures in a row disable the webhook.

Redirects are not followed and the URL must be public HTTPS.

Test deliveries sent from the panel use sample ids starting with 00000000-0000-4000-.

Return any 2xx to acknowledge. Anything else is retried after 10 s, 1 min and 5 min; after 20 failed deliveries in a row the webhook is disabled in the panel.

This response does not have a body.

curl --location 'https://fodimi.pl/api_public/client.points_changed' \ --header 'Content-Type: application/json' \ --data '{ "event": "client.points_changed", "id": "94ed75f8-7286-43e8-b30b-5a65d9e16d9a", "created_at": "2026-09-12T09:15:45+02:00", "company_uid": "1623978b-9ac9-400a-b6a0-2b7b8f97bb64", "data": { "client": { "uid": "28a7c222-3abf-48df-b104-a1532236dd5f" }, "occurred_at": "2026-09-12T09:15:45+02:00", "points": { "delta": 15, "previous_balance": 120, "balance": 135, "reason": "ORDER", "order_uid": "3f1b1f0c-2c2e-4c42-9f1a-6b5a4d2e8a11" } } }'

Client points changed

Request

Responses