Skip to main content

Setup payment notifications

Why we send notifications#

Your return URLs are plain text and could be modified by your customer. Therefore, the status we send to the return URL cannot be considered a reliable source of status information.

Instead, we inform you about the status of a payment by sending a POST request containing a digitally signed payment notification to a secure URL on your server.

You can check the signature of the message using a secret key to verify that it came from Volt.

Prepare to receive payment status notifications#

We'll POST a payment notification just before we return your customer to one of the success, pending or failure URLs you configured.

If a status subsequently changes from pending to a success or failure state, we'll send another notification to update you.

Each notification will be digitally signed with a notification secret key. This key can be retrieved and refreshed in Fuzebox as part of your application setup.

You'll then need to confirm that you have received the notification and validated that the signature is correct.

How to setup notifications#

Head over to Fuzebox and find the application you're using to access Volt's API. Navigate to the Notification settings section and click Configure notifications.

configure_notification

Configuration options#

Payment notification URL#

This is the URL to which we'll send payment notifications for this application. It must begin with https:// and be able to accept a standard HTTP POST message containing custom headers and a plain text body.

Notification failure email#

We'll send an email to this address should we encounter any issues in sending payment notifications to your payment notification URL.

Obtain your notification secret#

The notification secret is used to create the digital signature for each message. You will need to copy it and securely store it on your server in order to verify the signature when you receive a message.

Keep your secret... secret

If your Notifications secret ever becomes known, you should change it immediately - you can do that by clicking the Generate a new notification secret button in the Notifications section on Fuzebox

Send a test notification#

Once you have configured your notification URL and failure email address and obtained your notification secret, you should test your notification setup by clicking the *Send a test notification button. We'll send a signed notification to you and will require a response code from you.

Always respond to a Volt test notification.#

We'll periodically send an automated test message to verify that your notification endpoint is available, so please ensure that you can identify and verify a Volt test notification and respond accordingly.

Verify and respond with an HTTP code#

When you receive the notification, you'll need to verify that it came from Volt. Once you've done this check, you should respond with an HTTP 200 code if you successfully verified the signature, or an HTTP 400 code if you couldn't verify it.

Detailed information on notifications and how to verify the signature can be found here.