...
Example hook request body:
| Code Block |
|---|
{
"eventTypeeventId": "payment.statusChangeb2935024-5e46-4cf7-878f-5359526922e5",
"eventTimestampeventType": "2024-05-07T14:49:55.884Zpayment.statusChange",
"eventIdeventTimestamp": "c2949dfe2024-4585-46eb-9213-35f0f7faf05505-07T15:27:32.197Z",
"clientIddata": "62d23f64-2317-4071-8779-1cf52695b93d",{
"hookType": "payment.statusChange", "timestamppaymentId": "2024-05-07T14:49:55.884Z0dbe5c2f-3cf3-4177-84fb-5b25c7f6686f",
"data": {
"paymentIdorderId": "da96bc8fc3ae08d7-cc775719-4ae84112-80acbf67-84b648178d60bb9f03e74255",
"status": "BOOKED"
}
} |
Example signature header (using secret value abcd):
| Code Block |
|---|
Signature: ts=2024-05-07T1407T15:4927:5532.887Z290Z;v0=25450941c271d5309b57a5ba21486331cb21531fa2a28a0f5f87cc93ebbbe60ea7745d8eb55151d67fa8e95197ce34a4276b7ced2f55982630e9275af57ad317 |
To verify the signature:
Concatenate timestamp from signature header with request body as string
| Code Block |
|---|
2024-05-07T1407T15:4927:5532.887Z290Z.{"eventType":"payment.statusChange","eventTimestamp":"2024-05-07T14:49:55.884Z","eventId":"c2949dfeb2935024-45855e46-46eb4cf7-9213878f-35f0f7faf0555359526922e5","clientIdeventType":"62d23f64-2317-4071-8779-1cf52695b93d","hookType":"payment.statusChange","timestampeventTimestamp":"2024-05-07T1407T15:4927:5532.884Z197Z","data":{"paymentId":"0dbe5c2f-3cf3-4177-84fb-5b25c7f6686f","orderId":"da96bc8fc3ae08d7-cc775719-4ae84112-80acbf67-84b648178d60bb9f03e74255","status":"BOOKED"}} |
Use HMAC-SHA256 algorithm to compute the hexadecimal hash of string created in previous step.
...