Incoming postbacks from Better Payment includes a field called checksum. We should take the body of the request we receive(without checksum), calculate the checksum and compare it with the checksum we received.
If checksums don't match, no updates should happen.
Description
Incoming postbacks from Better Payment includes a field called
checksum
. We should take the body of the request we receive(without checksum), calculate the checksum and compare it with the checksum we received.If checksums don't match, no updates should happen.
Requirements
Checksum calculation is described over https://dashboard.betterpayment.de/docs/#checksum-legacy. HOWEVER, use
incoming_key
instead ofoutgoing_key
as mentioned in the docs.