Stay in sync with webhooks.

Axiron sends payment state changes to your callback URL. Treat the callback as a signed event to verify, reconcile and acknowledge.

1. Register your callback

   Pass your HTTPS callbackUri when creating the payment. Preserve the payment ID and your order ID for reconciliation.

2. Verify before processing

   Read the raw request body and validate the HMAC-SHA256 signature with your secret key before interpreting the payload. Use the handler example for the specific callback.

3. Handle duplicates safely

   Treat the same (id, state) pair as idempotent. A repeated callback must not credit the customer twice.

4. Read the payment outcome

   The top-level status: true is not proof that funds settled. Use result.state and reconcile the final amount.

5. Acknowledge the event

   Return the acknowledgement documented for that callback. Use the status endpoint as a reconciliation fallback when needed.