This endpoint allows the merchants to verify the received webhook notifications against with what was configured under merchant account webhooks before proceeding to process the request instruction to avoid bogus requests.
Obtain event-code and webhook-signature from the received webhook notification using these request headers namely X-OneKhusa-Webhook-Event and X-OneKhusa-Webhook-Signature.
DO NOT compute the received webhook signature with any algorithm such as SHA256, SHA384, SHA512 or encode to base64string but rather set it as is to the payload for equality comparison.
Bearer authentication header of the form Bearer
Preferred language for the response
An active account number for the merchant registered on OneKhusa for verifying webhooks.
10000000 <= x <= 9999999912345678
The event code received from webhook notification request.
"payrequest.success"
The unique signature received from webhook notification request.
"e4V5qKIM2ZX6Gl2A9K9Owy_J98gqBf4VgTF...."