navan-webhooks-events

# Navan Webhooks & Events ## Overview Navan supports asynchronous event delivery via callback URLs registered through the REST API. Since there is no public SDK, webhook handlers receive raw HTTP POST requests with JSON payloads. This skill covers endpoint setup, payload verification, event routing, and idempotent processing for the key event types: booking lifecycle, expense workflow, and travel disruptions. ## Prerequisites - Active Navan account with API credentials (Admin > Travel admin > Settings > Integrations) - OAuth 2.0 access token (see `navan-install-auth`) - Publicly accessible HTTPS endpoint for callback URL (use ngrok for local development) - Node.js 18+ with Express or equivalent HTTP framework ## Instructions ### Step 1: Register a Webhook Callback URL ```typescript const response = await fetch('https://api.navan.com/v1/webhooks', { method: 'POST', headers: { 'Authorization': `Bearer ${accessToken}`, 'Content-Type': 'application/json' }, body: JSON.stringify({ url: 'https://your-domain.com/webhooks/navan', events: [ 'booking.created', 'booking.updated', 'booking.cancelled', 'expense.submitted', 'expense.approved', 'expense.rejected', 'trip.disrupted' ], secret: process.env.NAVAN_WEBHOOK_SECRET }) }); const webhook = await response.json(); console.log('Webhook registered:', webhook.id); ``` ### Step 2: Verify Payload Signatures ```typescript import crypto from 'node:crypto'; funct...