Guides / Webhooks
Webhooks
Verify signed outbound webhook deliveries.
Steps
- Register an HTTPS endpoint under store integrations.
- Verify X-RentedMall-Webhook-Signature (t= timestamp, v1= HMAC).
- Reject stale timestamps to reduce replay risk.
- Handle order.paid, payment.succeeded, fulfillment.completed, and related events idempotently.
Related: Documentation · Help · FAQ