Webhook verification

Last updated: June 24, 2026

Webhook verification

Webhook verification protects order and license activation.

  • Verify the XPayr webhook signature or webhook secret.
  • Match the payment/session ID to a known pending order.
  • Reject duplicate payment events using idempotency checks.
  • Update license and settlement records only after trusted confirmation.
  • Return HTTP 200 for valid processed events.