Sign in

v1

latestOpenAPI 3.0.42026-07-2286621993.2 KB
verify-webhook-signature

Verify webhook signature

Verifies a webhook signature.

post/v1/notifications/verify-webhook-signature

Request body

auth_algostring required

The algorithm that PayPal uses to generate the signature and that you can use to verify the signature. Extract this value from the PAYPAL-AUTH-ALGO response header, which is received with the webhook notification.

cert_urlstring uri required

The X.509 public key certificate. Download the certificate from this URL and use it to verify the signature. Extract this value from the PAYPAL-CERT-URL response header, which is received with the webhook notification.

transmission_idstring required

The ID of the HTTP transmission. Contained in the PAYPAL-TRANSMISSION-ID header of the notification message.

transmission_sigstring required

The PayPal-generated asymmetric signature. Appears in the PAYPAL-TRANSMISSION-SIG header of the notification message.

transmission_timestring date-time required

The date and time of the HTTP transmission, in Internet date and time format. Appears in the PAYPAL-TRANSMISSION-TIME header of the notification message.

webhook_idstring required

The ID of the webhook as configured in your Developer Portal account.

Response

A successful request returns the HTTP 200 OK status code and a JSON response body that shows the verification status.

verification_status'SUCCESS' | 'FAILURE' required

The status of the signature verification.