Webhooks

Webhooks are event-based notifications that are received when a specific event related to the reverse penny drop verification occurs.

​

Add Webhooks

Add your webhook URL in our system for us to deliver webhook events.

Follow the instructions below to configure the webhook URL. Ensure to provide the publicly accessible HTTPS URL to your webhook endpoint.

1. Once you login to the dashboard with the credentials, click Developers.
2. Click Webhooks listed under the Verification Suite card.
3. Click Add Webhook URL in the Developers - Verification Suite screen.
4. In the Add Webhook popup, fill in the following information:
   • Webhook URL - Enter the URL in this field.
5. Click Test & Add Webhook.

​

Webhook Event

​

Signature Verification

Verifying the signature is mandatory before processing any response. It helps authenticate that the webhook is from Cashfree Payments.

Follow the steps to verify the signature:

1. Sort the array based on keys.
2. Concatenate all the values in this array and the resultant is the post data (postData).
3. postData needs to be encrypted using SHA-256 and then base64 encoded.
4. Verify if both the signature calculated and the signature received match.
5. Proceed further only if the signatures match. If not, discard the request.
6. Ensure clientSecret you use is from the oldest active key pair.

For example, from the webhook received, extract the data and pass it to generate HMAC function:

{bank_account=026291800001191, ifsc=YESB0000262, upi=, name_at_bank=John Doe, 
verification_id=fadsfdsf, ref_id=332, utr=332, status=SUCCESS,
added_on=2023-09-06T07:48:53+05:30, processed_on=2023-09-06 07:49:03, 
penny_collected_on=2023-09-06 07:48:53}