PHPackages                             webium/silverstripe-indeed-apply - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. webium/silverstripe-indeed-apply

ActiveSilverstripe-vendormodule

webium/silverstripe-indeed-apply
================================

Indeed Apply integration for SilverStripe - receive job applications via Indeed's Quick Apply feature

2.0.10(3mo ago)032MITPHPPHP >=7.4

Since Nov 21Pushed 3mo agoCompare

[ Source](https://github.com/hubertusanton/silverstripe-indeed-apply)[ Packagist](https://packagist.org/packages/webium/silverstripe-indeed-apply)[ Docs](https://github.com/webium/silverstripe-indeed-apply)[ RSS](/packages/webium-silverstripe-indeed-apply/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (1)Versions (17)Used By (0)

SilverStripe Indeed Apply Module
================================

[](#silverstripe-indeed-apply-module)

This module enables receiving job applications from Indeed Apply via a POST endpoint.

What does this module do?
-------------------------

[](#what-does-this-module-do)

This module:

- Provides an endpoint (`/indeed-apply`) where Indeed Apply applications can be sent
- Logs all incoming requests for debugging
- Stores applications in the database for further processing
- Provides a CMS interface for managing applications and logs

Installation
------------

[](#installation)

1. Install via Composer:

```
composer require webium/silverstripe-indeed-apply
```

2. Run dev/build to create database tables:

```
vendor/bin/sake dev/build flush=1
```

Database Tables
---------------

[](#database-tables)

After installation, the following tables are created:

- `IndeedApply` - Contains the applications
- `IndeedApplyLog` - Contains logs of all requests

Endpoint
--------

[](#endpoint)

The module creates a POST endpoint at:

```
https://yourdomain.com/indeed-apply

```

### Customizing the Endpoint URL

[](#customizing-the-endpoint-url)

You can customize the endpoint URL by editing your project's config file:

**app/\_config/indeed-apply-custom.yml:**

```
---
Name: indeed-apply-custom
After: 'indeed-apply-config'
---
# Custom route configuration
SilverStripe\Control\Director:
  rules:
    'jobs/apply': 'Webium\IndeedApply\Controllers\IndeedApplyController'

# Update the url_segment to match
Webium\IndeedApply\Controllers\IndeedApplyController:
  url_segment: 'jobs/apply'
```

**Important:** Don't forget to update your Indeed Apply postUrl in your job feed to match the new endpoint:

```
https://yourdomain.com/jobs/apply

```

Run `/dev/build?flush=1` after changing the route.

Authentication
--------------

[](#authentication)

The module supports HMAC-SHA1 signature verification for authenticating Indeed Apply POST requests.

### Configuration

[](#configuration)

Add the following to your project's `.env` file:

```
# Indeed Apply Module Configuration
INDEED_APPLY_API_SECRET="your-api-secret-here"
INDEED_APPLY_REQUIRE_SIGNATURE="false"
```

**Environment Variables:**

- `INDEED_APPLY_API_SECRET` - Your shared API secret from Indeed Apply integration settings
- `INDEED_APPLY_REQUIRE_SIGNATURE` - Set to `"true"` to require valid signatures (recommended for production)

The controller reads these environment variables directly using `Environment::getEnv()`.

### How it works

[](#how-it-works)

1. Indeed Apply sends a POST request with an `x-indeed-signature` header
2. The signature is generated using HMAC-SHA1 on the raw JSON body with your shared API secret
3. The module verifies the signature matches the expected value
4. All requests are logged with signature validation status in `IndeedApplyLog`

### Security Options

[](#security-options)

**Development mode** (default):

```
INDEED_APPLY_REQUIRE_SIGNATURE="false"
```

- All requests are accepted regardless of signature
- Signature validation status is logged for debugging
- Use this for initial testing

**Production mode** (recommended):

```
INDEED_APPLY_REQUIRE_SIGNATURE="true"
```

- Only requests with valid signatures are accepted
- Invalid signatures return HTTP 401 Unauthorized
- Protects against unauthorized POST requests

### Getting Your API Secret

[](#getting-your-api-secret)

1. Log in to your Indeed Employer account
2. Go to Indeed Apply integration settings
3. Find the "Shared API Secret" with credential type "Indeed Apply"
4. Copy the secret and add it to your configuration

XML Feed Configuration
----------------------

[](#xml-feed-configuration)

Add the following field to your Indeed XML feed:

```
indeed-apply-apiToken=YOUR_API_TOKEN&indeed-apply-jobTitle=JOB_TITLE&indeed-apply-jobId=JOB_ID&indeed-apply-jobCompanyName=COMPANY_NAME&indeed-apply-jobLocation=LOCATION&indeed-apply-jobUrl=https%3A%2F%2Fyourdomain.com%2Fjob-url&indeed-apply-postUrl=https%3A%2F%2Fyourdomain.com%2Findeed-apply%2F&indeed-apply-name=firstlastname]]>
```

**Important:**

- The `indeed-apply-postUrl` must point to your domain's `/indeed-apply/` endpoint
- **`indeed-apply-name` must be set to `firstlastname`** - This module requires separate `firstName` and `lastName` fields. Without this setting, Indeed only sends `fullName` and the module will return HTTP 400 for missing required fields.

Expected Data
-------------

[](#expected-data)

The module expects the following fields from Indeed:

### Job Information

[](#job-information)

- `jobTitle` - Job title
- `jobId` - Job/vacancy ID
- `jobCompanyName` - Company name
- `jobLocation` - Location
- `jobUrl` - URL to job posting

### Candidate Information

[](#candidate-information)

- `fullName` - Full name
- `firstName` - First name
- `lastName` - Last name
- `email` - Email address
- `phoneNumber` - Phone number
- `coverLetter` - Cover letter
- `resume` - CV (file upload)

### Custom Questions

[](#custom-questions)

All fields starting with `question_` or `customQuestion` are automatically stored as JSON.

CMS Interface
-------------

[](#cms-interface)

After installation, a new menu item appears in the CMS: **Indeed Apply**

Here you can:

1. **Indeed Apply Applications** - View and manage applications

    - All received applications
    - Candidate information
    - CV downloads
    - Track status (processed/not processed)
    - Add notes
2. **Indeed Apply Logs** - View request logs

    - All received requests
    - Request headers and body
    - Response codes
    - Error messages
    - Logs are read-only

Permissions
-----------

[](#permissions)

The module uses the following permission:

- `CMS_ACCESS_IndeedApplyAdmin` - Access to Indeed Apply administration

This can be assigned to user groups via Security > Groups.

Processing Applications
-----------------------

[](#processing-applications)

Applications are stored with `IsProcessed = false`. You can later:

1. Manually process them in the CMS
2. Automatically process them via a custom script
3. Export to Excel for bulk processing

Debugging
---------

[](#debugging)

All requests are logged in `IndeedApplyLog`. Here you can see:

- When a request came in
- What the request body was
- Signature validation status (true/false)
- Whether it was successful
- Any error messages

The `SignatureValid` field in logs shows whether the HMAC-SHA1 signature was valid for each request.

Technical Details
-----------------

[](#technical-details)

- **Namespace:** `Webium\IndeedApply`
- **Endpoint URL:** `/indeed-apply`
- **Accepted methods:** POST only
- **CSRF Protection:** Disabled for this endpoint (required for external POST requests)
- **File uploads:** Max 5MB, allowed extensions: pdf, doc, docx, txt, rtf

Response Codes
--------------

[](#response-codes)

The endpoint returns the following HTTP status codes:

CodeDescription200Application received successfully400Missing required fields in JSON payload401Invalid signature (when `INDEED_APPLY_REQUIRE_SIGNATURE` is enabled)405Method not allowed (only POST is accepted)404Job does not exist in the system (via `validateJobExists` extension hook)409Duplicate application: candidate has already applied for this job within the last 120 days410Job is expired or no longer published (via `validateJobExpired` extension hook)413Payload too large (exceeds PHP's `post_max_size` setting)422Unable to save application (valid JSON but can't be processed)### Required Fields (400)

[](#required-fields-400)

The following fields are required in the JSON payload:

FieldRequired`job.jobId`Yes`applicant.fullName`Yes`applicant.firstName`Yes, when `indeed-apply-name` is set to `firstlastname``applicant.lastName`Yes, when `indeed-apply-name` is set to `firstlastname``applicant.email`Yes`applicant.verified`YesIf any required field is missing, the endpoint returns HTTP 400 with a list of missing fields.

### Duplicate Application Check (409)

[](#duplicate-application-check-409)

The module automatically checks for duplicate applications based on `CandidateEmail` and `JobId`. If a candidate has already applied for the same job, the endpoint returns HTTP 409.

Extension Hooks
---------------

[](#extension-hooks)

The controller provides extension hooks for custom validation logic. These hooks allow you to validate JobIds against your ATS (Applicant Tracking System).

### validateJobExists Hook (404)

[](#validatejobexists-hook-404)

Use this hook to check if a JobId exists in your system. If the job doesn't exist at all, set the error to return HTTP 404.

### validateJobExpired Hook (410)

[](#validatejobexpired-hook-410)

Use this hook to check if a job is expired or no longer published. If the job exists but is no longer available, set the error to return HTTP 410.

**Create an extension in your application:**

```
// app/src/Extension/IndeedApplyJobValidator.php
namespace App\Extension;

use SilverStripe\Core\Extension;

class IndeedApplyJobValidator extends Extension
{
    /**
     * Check if job exists in the system (404 if not found)
     */
    public function validateJobExists(string $jobId, ?string &$error): void
    {
        $job = MyATSService::findJob($jobId);

        if (!$job) {
            $error = "Job {$jobId} does not exist";
        }
    }

    /**
     * Check if job is expired/unpublished (410 if expired)
     */
    public function validateJobExpired(string $jobId, ?string &$error): void
    {
        $job = MyATSService::findJob($jobId);

        if ($job && !$job->isPublished()) {
            $error = "Job {$jobId} is no longer available";
        }
    }
}
```

**Register in `app/_config/config.yml`:**

```
Webium\IndeedApply\Controllers\IndeedApplyController:
  extensions:
    - App\Extension\IndeedApplyJobValidator
```

Run `dev/build flush=1` after adding the extension.

Resume File Security
--------------------

[](#resume-file-security)

Resume files are uploaded to `Uploads/IndeedApply/Resumes/` and are automatically protected. Each uploaded resume has `CanViewType` set to `LoggedInUsers`, ensuring that only logged-in CMS users can access the files.

Troubleshooting
---------------

[](#troubleshooting)

### "Method Not Allowed" error

[](#method-not-allowed-error)

Check if Indeed is actually sending POST requests to the endpoint.

### Applications not being saved

[](#applications-not-being-saved)

1. Check the logs in `Indeed Apply Logs` in the CMS
2. Look at the `RequestBody` to see what data Indeed is sending
3. Verify that field names match

### CVs not uploading

[](#cvs-not-uploading)

1. Check file upload settings in `php.ini`
2. Verify that the `Uploads/IndeedApply/Resumes` directory has write permissions
3. Check logs for specific error messages

### Invalid signature errors (HTTP 401)

[](#invalid-signature-errors-http-401)

1. Verify your `INDEED_APPLY_API_SECRET` in `.env` matches the shared secret in your Indeed Apply integration settings
2. Check the `SignatureValid` field in `IndeedApplyLog` to see signature validation status
3. Ensure `INDEED_APPLY_REQUIRE_SIGNATURE` is set to `"false"` during initial testing
4. Confirm the `X-Indeed-Signature` header is being sent by Indeed

Requirements
------------

[](#requirements)

- SilverStripe 4.x or 5.x

Documentation
-------------

[](#documentation)

For more information about Indeed Apply, see:

License
-------

[](#license)

MIT

Maintainer
----------

[](#maintainer)

Webium -

###  Health Score

37

—

LowBetter than 82% of packages

Maintenance83

Actively maintained with recent releases

Popularity7

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity43

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~3 days

Total

16

Last Release

115d ago

Major Versions

1.0.4 → 2.0.02025-11-26

### Community

Maintainers

![](https://www.gravatar.com/avatar/620a71b0219e7a3b9cec3626c6b023c9f4fa6b2c142a183887c343bf4d7ee195?d=identicon)[hubertusanton](/maintainers/hubertusanton)

---

Top Contributors

[![hubertusanton](https://avatars.githubusercontent.com/u/582188?v=4)](https://github.com/hubertusanton "hubertusanton (17 commits)")

---

Tags

silverstripejobsindeedATSrecruitmentapplyindeed-applyapplicant-tracking

### Embed Badge

![Health badge](/badges/webium-silverstripe-indeed-apply/health.svg)

```
[![Health](https://phpackages.com/badges/webium-silverstripe-indeed-apply/health.svg)](https://phpackages.com/packages/webium-silverstripe-indeed-apply)
```

###  Alternatives

[symbiote/silverstripe-queuedjobs

A framework for defining and running background jobs in a queued manner

56854.2k83](/packages/symbiote-silverstripe-queuedjobs)[silvershop/core

Provides an ecommerce product catalog, shopping cart, and order management system

11340.0k37](/packages/silvershop-core)[silverstripe-terraformers/gridfield-rich-filter-header

Rich filter header component for GridField

1325.7k1](/packages/silverstripe-terraformers-gridfield-rich-filter-header)[sunnysideup/ecommerce

Silverstripe E-commerce Application

257.2k79](/packages/sunnysideup-ecommerce)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)