HMAC Authentication
Deliverect can sign outgoing webhook requests using HMAC-SHA256, allowing you to verify that requests genuinely originate from Deliverect and have not been tampered with in transit. This can be achieved using a pre-shared secret configured on your integration.
Webhooks
Implement the following webhooks so Deliverect can register payment profiles and send payment lifecycle events to your platform.
| Webhook | Method | Purpose |
|---|---|---|
| Register Profile | POST | Register a payment profile in a customer account and return the URLs Deliverect uses for payment, refund, and unregistration events. |
| Request Payment | POST | Process a payment request and respond with authorized, pending, or refused. |
| Refund Payment | POST | Process a full or partial refund and respond with succeeded, pending, or failed. |
| Unregister Profile Event | POST | Disable and remove a payment profile when it is uninstalled from a customer account. |