Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi. I have a question about webhooks. If I have multiple hooks set up for the same trigger, are the non-blocking hooks always triggered after the flow-interrupting hooks? e.g. if the flow is interrupted with an error, then the requests won’t be sent to the non-blocking webhook endpoints?

So the hook executor simply executes hooks in two loops. One before persisting and one after. This is governed by `can_interrupt` and `response.parse` . If `can_interrupt` is true, then the hook is executed before persisting. If `response.parse`  is false, then also before persisting.

`response.ignore` just says whether it runs detached or not and does not influence hook position.

&gt; `If response.parse  is false, then also before persisting.`
Did you mean `true` there?

The webhook config is a bit confusing. There seems to be a lot of redundancy between `can_interrupt` , `response.parse` , and `response.ignore`.