Configuration
You can configure your webhook endpoints in the Business Dashboard.- URL: Must be an
https://endpoint. - Events: Select the specific events you want to listen to (e.g.,
payment.succeeded). - Secret: PaveWay provides a Signing Secret (
whsec_...) for each endpoint to verify request authenticity.
Common Event Types
| Event | Description |
|---|---|
payment.succeeded | Triggered when a PaymentIntent status changes to succeeded. |
payment.failed | Triggered when a payment attempt fails. |
order.completed | Triggered when an eSIM or other financial service order is successfully provisioned. |
payout.failed | Triggered if a scheduled payout to your bank/wallet fails. |
Retry Policy
If your server returns anything other than a2xx status code, PaveWay will retry the notification with exponential backoff:
- Retries occur up to 10 times over 24 hours.
- If an endpoint fails consistently for 7 days, it will be automatically disabled.
Receiving a Webhook
Your endpoint should be prepared to handle a POST request with a JSON body.[!IMPORTANT] You should always verify the signature of the webhook before processing the payload. See our Signature Verification guide.