Paypal API

Verify webhook signature

POST

/v1/notifications/verify-webhook-signature

Verifies a webhook signature.

请求参数

Authorization

在 Header 添加参数

Authorization

，其值为在 Basic 之后拼接空格，以及经过 Base64 编码的 username:password

示例：

Authorization: Basic *****************

Header 参数

Content-Type

string

必需

The Content-Type header field is used to specify the nature of the data in the body of an entity. PayPal REST APIs support application/json.

示例值:

application/json

PayPal-Request-Id

string

必需

The server stores keys for 6 hours. The API callers can request the times to up to 72 hours by speaking to their Account Manager.

示例值:

Body 参数application/json

object {0}

示例

{
    "webhook_id": "{{webhook_id}}",
    "transmission_id": "{{event_transmission_id}}",
    "transmission_time": "{{event_transmission_time}}",
    "cert_url": "{{event_cert_url}}",
    "auth_algo": "{{event_auth_algo}}",
    "transmission_sig": "{{event_transmission_sig}}",
    "webhook_event": {{event_webhook_payload}}
}

示例代码

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST 'https://api-m.sandbox.paypal.com/v1/notifications/verify-webhook-signature' \
--header 'PayPal-Request-Id: ' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic Og==' \
--data-raw '{
    "webhook_id": "{{webhook_id}}",
    "transmission_id": "{{event_transmission_id}}",
    "transmission_time": "{{event_transmission_time}}",
    "cert_url": "{{event_cert_url}}",
    "auth_algo": "{{event_auth_algo}}",
    "transmission_sig": "{{event_transmission_sig}}",
    "webhook_event": {{event_webhook_payload}}
}'

返回响应

🟢200200 - Verification Successful

application/json

Body

verification_status

string

必需

示例

{
    "verification_status": "SUCCESS"
}

🟢200200 - Verification Failed

🟠400400 Bad Request - Webhook ID Missing

🟠401401 Unauthorized - Invalid Token

Trigger a sample event

Resend event notification