feat(quickbooks): finalize credential-scoped webhook triggers

Author: waleedlatif1

apps/docs/content/docs/integrations/quickbooks.mdx

@@ -11,7 +11,7 @@ import { BlockInfoCard } from "@/components/ui/block-info-card"
 />
 
 {/* MANUAL-CONTENT-START:intro */}
-Connect one QuickBooks Online company per credential. Create an app in the Intuit Developer Portal, register `https://<your-sim-host>/api/auth/oauth2/callback/quickbooks` as its redirect URI, then enter that app's client ID and client secret in Sim and select its Sandbox or Production environment. Sim encrypts this app configuration on the credential and uses it for authorization, refresh, and revocation.
+Connect one QuickBooks Online company per credential. Create an app in the Intuit Developer Portal, register `https://<your-sim-host>/api/auth/oauth2/callback/quickbooks` as its redirect URI, then enter that app's client ID, client secret, and webhook verifier token in Sim and select its Sandbox or Production environment. Sim encrypts this app configuration on the credential and uses it for authorization, refresh, revocation, and webhook signature verification.
 
 During OAuth, choose the company that the workflow should access. Intuit returns the realm ID in the callback, and Sim verifies that the issued token can read CompanyInfo through that company-scoped API path before binding it to the credential, so you do not enter a realm ID or API host. The `CompanyInfo.Id` field is a separate entity ID and is not used as the realm ID.
 
@@ -21,6 +21,8 @@ QuickBooks update actions require the record ID and its current `SyncToken`; pro
 
 Sandbox credentials call only Intuit's sandbox API and are suitable for disposable test data. Production credentials call the production API and affect the selected live company.
 
+QuickBooks triggers use Intuit's app-level webhook model. After adding a trigger and deploying the workflow once, copy the generated Webhook URL from the block into the matching Development or Production Webhooks settings for the same Intuit app. Enable the CloudEvents payload format and select every entity and operation needed by your deployed workflows. One Intuit endpoint can serve multiple connected companies; Sim verifies the raw-body `intuit-signature` with that app's encrypted verifier token and routes each event by both Intuit app and OAuth-derived realm ID.
+
 Run Financial Report exposes verified financial statements, aging, balance, sales, and expense reports while preserving QuickBooks' native columns and nested rows. Advanced controls appear only where QuickBooks supports them. Use Read Master Data to discover customer, vendor, account, item, class, and department IDs for report filters. Intuit recommends report periods of six months or less for performance, though Sim does not forbid longer accounting periods.
 
 Document actions can read attachment metadata, add one File or Note attachment, download an attachment file, and download supported transactions as PDFs. Downloaded files are stored as Sim files for downstream blocks. Attachment deletion, bulk upload/download, and bulk email remain outside this version of the block.
@@ -2973,7 +2975,7 @@ Trigger when selected Account events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_account_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3003,7 +3005,7 @@ Trigger when selected Bill events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_bill_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3033,7 +3035,7 @@ Trigger when selected Bill Payment events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_bill_payment_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3063,7 +3065,7 @@ Trigger when selected Budget events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_budget_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3093,7 +3095,7 @@ Trigger when selected Class events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_class_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3123,7 +3125,7 @@ Trigger when selected Credit Memo events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_credit_memo_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3153,7 +3155,7 @@ Trigger when selected Currency events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_currency_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3183,7 +3185,7 @@ Trigger when selected Customer events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_customer_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3213,7 +3215,7 @@ Trigger when selected Department events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_department_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3243,7 +3245,7 @@ Trigger when selected Deposit events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_deposit_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3273,7 +3275,7 @@ Trigger when selected Employee events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_employee_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3303,7 +3305,7 @@ Trigger when selected Estimate events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_estimate_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3333,7 +3335,7 @@ Trigger when selected Invoice events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_invoice_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3363,7 +3365,7 @@ Trigger when selected Item events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_item_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3393,7 +3395,7 @@ Trigger when selected Journal Code events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_journal_code_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3423,7 +3425,7 @@ Trigger when selected Journal Entry events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_journal_entry_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3453,7 +3455,7 @@ Trigger when selected Payment events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_payment_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3483,7 +3485,7 @@ Trigger when selected Payment Method events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_payment_method_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3542,7 +3544,7 @@ Trigger when selected Purchase events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_purchase_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3572,7 +3574,7 @@ Trigger when selected Purchase Order events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_purchase_order_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3602,7 +3604,7 @@ Trigger when selected Refund Receipt events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_refund_receipt_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3632,7 +3634,7 @@ Trigger when selected Sales Receipt events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_sales_receipt_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3662,7 +3664,7 @@ Trigger when selected Tax Agency events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_tax_agency_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3692,7 +3694,7 @@ Trigger when selected Term events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_term_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3722,7 +3724,7 @@ Trigger when selected Time Activity events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_time_activity_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3752,7 +3754,7 @@ Trigger when selected Transfer events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_transfer_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3782,7 +3784,7 @@ Trigger when selected Vendor Credit events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_vendor_credit_events` | string | Yes | Event Types |
 
 #### Output
 
@@ -3812,7 +3814,7 @@ Trigger when selected Vendor events occur in QuickBooks
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `triggerCredentials` | string | Yes | QuickBooks Account |
-| `eventTypes` | string | Yes | Event Types |
+| `eventTypes_quickbooks_vendor_events` | string | Yes | Event Types |
 
 #### Output
 

apps/docs/openapi-v2-resources.json

@@ -8012,9 +8012,15 @@
                     "type": "string",
                     "enum": ["sandbox", "production"],
                     "description": "Intuit company environment used for authorization and API requests."
+                  },
+                  "webhookVerifierToken": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "description": "Write-only verifier token for webhook signatures from the caller-managed app."
                   }
                 },
-                "required": ["clientId", "clientSecret", "environment"],
+                "required": ["clientId", "clientSecret", "environment", "webhookVerifierToken"],
                 "additionalProperties": false
               }
             },
@@ -8056,9 +8062,15 @@
                     "type": "string",
                     "enum": ["sandbox", "production"],
                     "description": "Intuit company environment used for authorization and API requests."
+                  },
+                  "webhookVerifierToken": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "description": "Write-only verifier token for webhook signatures from the caller-managed app."
                   }
                 },
-                "required": ["clientId", "clientSecret", "environment"],
+                "required": ["clientId", "clientSecret", "environment", "webhookVerifierToken"],
                 "additionalProperties": false
               }
             },

apps/sim/app/api/auth/oauth/token/route.test.ts

@@ -108,7 +108,10 @@ describe('OAuth Token API Routes', () => {
         accountId: createQuickBooksAccountId(
           '123456789',
           'intuit-subject-01234567-89ab-4def-8abc-0123456789ab',
-          'sandbox'
+          {
+            clientId: 'client-id',
+            environment: 'sandbox',
+          }
         ),
         accessToken: 'test-token',
         refreshToken: 'refresh-token',

apps/sim/app/api/auth/oauth2/authorize/route.test.ts

@@ -114,6 +114,7 @@ describe('OAuth2 authorize route', () => {
       clientId: 'intuit-client-id',
       clientSecret: 'intuit-client-secret',
       environment: 'sandbox',
+      webhookVerifierToken: 'verifier-token',
     })
     mocks.createQuickBooksState.mockReturnValue('signed-state')
   })