Configure and verify Recruitee (Tellent) webhooks for candidate pipeline stage changes

Steps

1. Navigate to Settings > Apps and Plugins > Webhooks in Recruitee and click + New webhook; enter a name, a HTTPS POST URL, and select the candidate_moved event type.
2. Note the webhook secret displayed in the configuration dialog; store it securely — it is used to verify all incoming webhook requests.
3. When Recruitee fires a webhook, it includes X-Recruitee-Signature in the HTTP headers; the value is a base16-encoded HMAC-SHA256 digest computed over the raw request body using the webhook secret.
4. Verify the signature in your handler by computing HMAC-SHA256(secret, raw_body) and comparing the hex digest to X-Recruitee-Signature using constant-time comparison; reject any request where they do not match.
5. For stage-change events, parse the event_type (candidate_moved) and event_subtype (stage_changed); the payload.details object contains from_stage and to_stage objects with id, name, and category fields.