Zalo Integration Guide

Goal

Provide a practical baseline for integrating Zalo (OA/ZNS): auth, messaging, webhooks, and operational considerations.

Use when

• You need to design a notification flow via Zalo.
• You need to describe webhook handling from Zalo.
• You want a security/rate-limit checklist.

Do not use when

• The request involves bypassing policies or collecting data unlawfully.

Core topics

• Auth: tokens, refresh, scopes.
• Messaging: payload formats by message type.
• Webhooks: signature validation, retries, idempotency.
• Ops: rate limits, logging, error tracking.

Required inputs

• Account type (OA/ZNS).
• Use case (alerts, CS, transactional).
• Environment (dev/prod) and sandbox needs.

Expected output

• A clear integration plan with a technical checklist.

Notes

• Never put secrets in logs.
• Always validate webhook signatures and protect against replay.