Sparrow Layered Architecture

Sparrow Layered Architecture An architecture diagram generated by Archify. Your App · curl / SDK · Architecture component Your App curl / SDK REST API · Huma :8080 + auth · Sparrow deployment REST API Huma :8080 + auth Webhook Service · internal/webhooks · Sparrow deployment Webhook Service internal/webhooks PostgreSQL · events + River queue · Sparrow deployment PostgreSQL events + River queue River Workers · fan-out + delivery · Sparrow deployment River Workers fan-out + delivery Signing Client · HMAC + Ed25519 · Sparrow deployment Signing Client HMAC + Ed25519 Your Endpoints · HTTPS POST · Architecture component Your Endpoints HTTPS POST 1 subscribe · 2 push invoke persist event queue jobs sign payload 3 deliver Sparrow deployment Legend Backend Database Security External

Subscribe

  • • POST /v1/consumers/{ns}/webhooks with event types
  • • Subscriptions auto-created; whsec_ secret returned once
  • • Secrets envelope-encrypted at rest (AES-256-GCM)

Push

  • • POST /v1/consumers/{ns}/events, async 201
  • • Idempotency keys dedup repeats
  • • Fan-out enqueues one delivery per matching subscription

Deliver

  • • Signed HMAC-SHA256 (v1,) + Ed25519 (v1a,)
  • • Failures classified into 10 categories
  • • Retryable errors back off exponentially; health tracked per webhook