Webhooks

to notify you of any updates to an invoice (order) or an individual transaction, we will send webhooks to a url you specify you can easily send us the url (per environment) that you expect a webhook to come back to each sub section can be a separate url for security purposes, we create a signature based off our shared secret key, along with the body and timestamp of the message, so you can ensure the message truly originated from featherpay this will help you ensure not only was featherpay the true source of the webhook but that there is no replay attack authentication for security purposes, we append the epoch timestamp, the payload, and our secret key, and create a hmac sha 512 hash using our secret key and add it to the signature key sample below long timestamp = instant now() getepochsecond(); string secretkey = config getsecretkey(); string signature = new hmacutils(hmacalgorithms hmac sha 512, secretkey) hmachex(timestamp + payloadasstring + secretkey);