pass.window_opened

A time-limited pass access window opened and its holders were admitted.

Ability to subscribeproject-subscription-plan:view

When this fires

A scheduled access window on a time-limited pass plan reached its start time. Everyone holding that window has been admitted to the plan's resources on the connector.

Windows are processed every minute, so this fires within roughly 60 seconds of the advertised start time rather than exactly on it.

This describes the window, not an individual subscriber. For per-member grants, subscribe to member.resource_added, which fires once per subscriber per resource.

Caveats

  • Timestamps are UTC. A pass schedule is authored in the creator's timezone, so rendering these without converting will show the wrong local time to buyers.
  • subscribers_affected counts holders who were eligible at open time, not at purchase time. Cancelled and paused passes are excluded, so this can be lower than the number sold.
  • Anyone who buys after this fires is outside the count entirely; a plan whose sales cutoff is anchored to the window end keeps selling while the window runs. Those admissions arrive as member.resource_added, not as a second pass.window_opened.
  • A window whose worker was down for its entire span is closed without ever opening. In that case this event never fires and only pass.window_closed is emitted.

Related events

  • pass.window_closed: paired transition.
  • member.resource_added: per-subscriber grant.

Header Parameters

SB-Signature*string

t=<unix seconds>,v1=<hex>: the HMAC-SHA256 of "<t>.<raw body>" under the endpoint's secret. Verify it before acting, and refuse a t more than 300 seconds from now. During a secret rotation a v0= signature under the previous secret may precede v1=.

SB-Event-Id*string

The event's ULID, bare. The envelope's id is the same ULID prefixed evt_, so strip the prefix before comparing. Deduplicate on it: a retry carries the same id.

SB-Event-Name*string

The event name, the same as the envelope's type.

Content-Type*string

Always application/json.

User-Agent*string

Always Subscriby-Webhooks/1.0.

Request Body

application/json

The signed JSON envelope posted to your endpoint.

TypeScript Definitions

Use the request body type in TypeScript.

The envelope every event is delivered in.

Response Body

Example Requests

POST/pass.window_opened

How is this guide?