Docs/Sprachintegrationen
SPICEPAY DEVELOPER DOCS

Webhooks

Verify the HMAC-SHA512 signature before trusting a webhook in your Typescript service.

◷ 1 min readEnglish · API referenceMarkdown öffnen ↗

How it works

Verify the HMAC-SHA512 signature before trusting a webhook in your Typescript service. Preserve the raw request bytes until verification completes.

Implementation

Decode the hexadecimal signature, compute the expected digest with the shop signing secret and compare safely. Parse JSON only after success, deduplicate event_id and persist before acknowledging. Isolate test events from real fulfilment, compare amount and currency and process each order once. API keys and webhook signing secrets are separate credentials.

In this area

  • Verify a webhook
  • Typed content

Fragen zu deiner Integration? SpicePay kontaktieren ↗