Web integrations

Download AsyncAPI spec

Web integration events notify you about changes to web integration configurations and CORS (Cross-Origin Resource Sharing) settings in your Qlik Cloud tenant.

Preferred events

These events replace the legacy Web integrations events. Use these events for all new implementations.

Published when a web integration is created.

Payload

object

idstring
Required

Identifies the event.

minLength = 1
timestring

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
typestring
Required

Describes the type of event related to the originating occurrence.

default = "com.qlik.core.web-integration.created"
sourcestring
Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference"
specversionstring
Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttypestring

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1, default = "application/json"
useridstring

Unique identifier for the user triggering the event.
authtypestring

Type of authentication context for the actor that triggered the event.
tenantidstring
Required

Unique identifier for the tenant related to the event.
sessionidstring

Unique identifier for the session of the user triggering the event. Present only when a session identifier is available.
authclaimsstring

Serialized authentication claims for the actor that triggered the event.
tracestatestring

A comma-delimited list of key-value pairs.
traceparentstring

Contains a version, trace ID, span ID, and trace options.
dataobject

Web integration details.
Show data properties
- idstring
  Required
  
  Web integration identifier.
- namestring
  Required
  
  Web integration name.
- validOriginsarray of strings
  Required
  
  List of valid origins (URLs) allowed to use the web integration for CORS requests.

com.qlik.core.web-integration.created

Example payload of the "Web integration created" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.core.web-integration.created",
  "source": "com.qlik/tenants",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "UZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authtype": "tenants",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\"sub\":\"auth0|abc123\",\"scope\":\"user_default\"}",
  "tracestate": "b3=00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "traceparent": "00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "data": {
    "id": "id123",
    "name": "Web integration 1",
    "validOrigins": [
      "http://unicorn.com",
      "http://foo.example"
    ]
  }
}

Published when a web integration is deleted.

Payload

object

idstring
Required

Identifies the event.

minLength = 1
timestring

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
typestring
Required

Describes the type of event related to the originating occurrence.

default = "com.qlik.core.web-integration.deleted"
sourcestring
Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference"
specversionstring
Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttypestring

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1, default = "application/json"
useridstring

Unique identifier for the user triggering the event.
authtypestring

Type of authentication context for the actor that triggered the event.
tenantidstring
Required

Unique identifier for the tenant related to the event.
sessionidstring

Unique identifier for the session of the user triggering the event. Present only when a session identifier is available.
authclaimsstring

Serialized authentication claims for the actor that triggered the event.
tracestatestring

A comma-delimited list of key-value pairs.
traceparentstring

Contains a version, trace ID, span ID, and trace options.
dataobject

Web integration details.
Show data properties
- idstring
  Required
  
  Web integration identifier.

com.qlik.core.web-integration.deleted

Example payload of the "Web integration deleted" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.core.web-integration.deleted",
  "source": "com.qlik/tenants",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "UZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authtype": "tenants",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\"sub\":\"auth0|abc123\",\"scope\":\"user_default\"}",
  "tracestate": "b3=00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "traceparent": "00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "data": {
    "id": "id123"
  }
}

Published when a web integration is updated.

Payload

object

idstring
Required

Identifies the event.

minLength = 1
timestring

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
typestring
Required

Describes the type of event related to the originating occurrence.

default = "com.qlik.core.web-integration.updated"
sourcestring
Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference"
specversionstring
Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttypestring

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1, default = "application/json"
useridstring

Unique identifier for the user triggering the event.
authtypestring

Type of authentication context for the actor that triggered the event.
tenantidstring
Required

Unique identifier for the tenant related to the event.
sessionidstring

Unique identifier for the session of the user triggering the event. Present only when a session identifier is available.
authclaimsstring

Serialized authentication claims for the actor that triggered the event.
tracestatestring

A comma-delimited list of key-value pairs.
traceparentstring

Contains a version, trace ID, span ID, and trace options.
dataobject

Web integration details. Contains the full web integration object plus the list of updates that were applied.
Show data properties
- idstring
  Required
  
  Web integration identifier.
- namestring
  
  Web integration name.
- _updatesarray of objects
  Required
  
  Collection of updates performed on the resource.
  
  Show _updates properties
  
  pathstring
  
  JSON Pointer path of the property that has changed.
  
  newValuestring|array
  
  Value of the field after the update. A string for scalar fields, or an array of strings for list fields such as validOrigins.
  
  One of:
  
  string
  
  array of strings
  
  oldValuestring|array
  
  Value of the field before the update. A string for scalar fields, or an array of strings for list fields such as validOrigins.
  
  One of:
  
  string
  
  array of strings
- validOriginsarray of strings
  
  List of valid origins (URLs) allowed to use the web integration for CORS requests.

com.qlik.core.web-integration.updated

Example payload of the "Web integration updated" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.core.web-integration.updated",
  "source": "com.qlik/tenants",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "UZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authtype": "tenants",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\"sub\":\"auth0|abc123\",\"scope\":\"user_default\"}",
  "tracestate": "b3=00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "traceparent": "00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
  "data": {
    "id": "id123",
    "name": "Web integration 2",
    "_updates": [
      {
        "path": "/name",
        "newValue": "Web integration 2",
        "oldValue": "Web integration 1"
      }
    ],
    "validOrigins": [
      "http://unicorn.com"
    ]
  }
}