A payment was received.

webhook

payment.completed

Sent when a payment is recorded as completed. A card, cash or other payment taken at checkout completes immediately; a bank debit completes only once it settles, which can be several days after checkout. A bank debit that has been submitted but has not yet settled does not send this event.

Payload

data

object

required

datacontenttype

string

enum

required

Allowed:

uuid

required

Equal to the WebHook-ID header value.

source

uri

required

specversion

string

enum

required

Allowed:

subject

string

Populated by interpolating the event payload into the template "payments/{paymentId}"; a placeholder whose field is missing or null is left as the literal "{token}".

tenantcode

string

Populated with the active tenant's code; omitted when no tenant context is active.

time

date-time

required

type

const

enum

required

Allowed:

Headers

WebHook-ID

uuid

required

Unique delivery identifier for subscriber deduplication. Equal to the envelope's "id" property, and covered by the RFC 9421 signature.

WebHook-Request-Origin

string

required

Sender identity (e.g. api.daysmart.com).

Content-Digest

string

required

RFC 9530 digest of the raw body, "sha-256=::". Recompute from the received body and confirm it matches before verifying the signature.

Signature-Input

string

required

RFC 9421 covered components and signature parameters (created, keyid, alg). See the webhookSignature security scheme for the full verification recipe.

Signature

string

required

RFC 9421 HTTP Message Signature, "sig1=::", verifiable against the published JWKS.

Responses

410

Endpoint gone. Subscription auto-deactivated (EndpointGone); delivery abandoned. No retry.

415

Unsupported content type. Subscription auto-deactivated (EndpointUnsupported); delivery abandoned. No retry.

429

Rate limit exceeded. Delivery retried after Retry-After delay (default 60s).

2XX

Webhook received successfully. Delivery marked Delivered.

4XX

Client error. Delivery abandoned; subscription stays active. No retry.

5XX

Server error. Delivery retried with exponential backoff up to maxAttempts.

Loading…