Skip to the content
Get an API key
  1. API reference
  2. Webhook events

user.authorized

Managed TransfersDeliveryPOST to your endpoint

Sent with the headers X-MusicAPI-Event: user.authorized and X-MusicAPI-Signature: t=<seconds>,v1=<hex HMAC-SHA256 of "t.body">.

Headers

Content-Type

application/json

X-MusicAPI-Event

The event name, for example transfer.completed.

X-MusicAPI-Signature

t=<seconds>,v1=<hex>. The hex is the HMAC-SHA256 of <t>.<raw body> with your endpoint secret.

Payload

id
string
The id of this delivery, evt_<uuid>. A retry sends the same id, so dedupe by it. Two endpoints get two different ids for the same event. Deliveries queued before 2026-10-16 have no id.
event
string
requiredOne of: user.authorized
createdAt
date-time
required
data
object
required
data.sessionUuid
uuid
required
data.role
string
requiredOne of: source, target
data.integrationType
string | null
required
data.integrationUserUuid
uuid
required
data.preauthorized
boolean
required
data.externalUserId
string
Only for a pre-authorized session.

Delivery and retries

Answer with a 2xx status. We try other answers again, up to 5 attempts in total. The waits between attempts are:

  • 60 s
  • 120 s
  • 240 s
  • 480 s

Set up the endpoint and its secret in the guide Set up and verify.