HPP signature verification

The HPP signature verification service allows you to verify the digital signature of a transaction webhook without implementing signature verification in your own application. The service accepts the complete transaction webhook payload and uses the terminal public key provided in the request to verify the webhook signature.

Use this service when you prefer a hosted verification option instead of implementing local signature verification.

To verify a transaction webhook:

• Receive the transaction webhook from the Xplor Pay.
• Send the complete webhook payload to the HPP Signature Verification Service.
• Include the terminal public key in the public-key request header.
• The service verifies the webhook signature.
• Check the verification response to determine whether the signature is valid.

Related topics:

• Transaction Webhooks
• Transaction Alert Settings