#2730-outbound webhook workflows

Hello BotSailor Technical Support Team,

We are using BotSailor for WhatsApp appointment booking notifications.

Our existing integration details:

• Backend: Node.js / Express hosted on Render
• Webhook URL: @guruvidya-backend.onrender.com.../botsailor
• Configuration: Automation → Outbound Actions → Webhook Workflows
• Five existing outbound webhook workflows
• POSTBACK and POSTBACK ID enabled in one workflow

Our current booking notification workflows are working. We are implementing appointment reminder button-click tracking and need clarification before enabling it.

Please confirm the following:

1. Does BotSailor authenticate outbound webhook requests using a cryptographic signature? If yes, what are the exact HTTP header, algorithm, raw-body signing procedure, and secret configuration? If not, what secure authentication method do you recommend?
2. What is the actual JSON payload for a WhatsApp template Quick Reply click? Please identify the fields for button title, postback ID, sender, incoming event ID, original outgoing message/context ID, account ID, and timestamp.
3. Our configured Quick Reply values include SjLv2QCfcOJmKRK, appointment-reschedule, and appointment-cancel. Which fields carry these values?
4. How can an incoming button click be reliably matched to the exact outgoing WhatsApp template message?
5. Can the same webhook event be retried? Which unique event identifier should be used for deduplication?
6. Can this be implemented through our existing webhook workflows without changing working booking notifications?

Please provide documentation or a redacted sample HTTP request with headers and JSON body.

This is a technical clarification request only. Please do not modify our configuration, trigger messages, or enable automation.

Thank you,