Using Webhooks

You may receive webhooks when certain order statuses are reached. This is an optional configuration that can reduce the number of API requests you need to send to Banxa.

Using Webhooks

You provide a webhook URL that Banxa can configure webhooks to be sent to. Once configured, webhooks will be sent to this URL when an order has transitioned to a particular status. A webhook notification will be sent via HTTP POST in the below format and will only include the Order ID.

You can provide Banxa with a separate webhook URL for your testing and for you production environments.

{'order_id':'ABCD1234'}

When you receive a webhook, you can then call the Get Order endpoint to retrieve detailed order information. This ensures that you do not receive calls from bad actors with incorrect information.

Securing Webhooks

If required, webhooks can be sent with HMAC authentication. Banxa will use the same secret provided to you during onboarding to encrypt the signature. You will receive the webhook with an Authorization Header that is generated and formatted in the same way as your API requests to Banxa i.e. "Authorization: Bearer API Key:Signature:Nonce". In order to decode the encryption, you will need to repeat the hash operation by computing the HMAC with the SHA256 hash function, and then perform an equality match.

HMAC guarantees that he message is from Banxa and has not been altered on the way by a third party.

Webhook Events

As webhook will be triggered and sent to your URL when the order has transitioned to the below statuses.

📘

Please note that if you are testing Webhooks in sandbox, you will only receive them when an order has transitioned to Expired, as orders in our sandbox environment are not live orders where the cryptocurrency can be transferred to the user.