Authenticate to the Revel Systems API using OAuth 2.0, retrieve open orders for a location, and handle webhook signature verification

Steps

1. Obtain a Bearer token by making a POST request to https://authentication.revelup.com/oauth/token with your client credentials; tokens expire every 24 hours and must be refreshed
2. Query open orders by sending a GET request to https://[yoursubdomain].revelup.com/resources/Order/ with appropriate query parameters to filter by location and order state
3. To receive real-time updates, configure a webhook URL in the Revel management console; Revel will POST event payloads to your URL when configured events occur
4. Verify incoming webhook authenticity by computing an HMAC-SHA1 hash of the payload using your shared secret key and comparing it to the hexadecimal value in the X-Revel-Signature header of the inbound request
5. Parse the webhook payload to extract the resource type and changed fields, then fetch the full updated record via the corresponding REST endpoint if the full object is needed
6. Implement token refresh logic before the 24-hour expiry to avoid interrupting webhook processing or polling cycles