Skip to main content
WEBHOOK

Authorizations

Authorization
string
header
required

API key from Dashboard → Developer API. Shown once when created.

Headers

X-Kawan-Event
string
required

Event type, e.g. order.paid.

X-Kawan-Delivery-Id
string<uuid>
required

Delivery id. Use for idempotent processing.

X-Kawan-Timestamp
integer
required

Unix seconds when this delivery was sent.

X-Kawan-Signature
string
required

t={unix},v1={hmac_sha256_hex} over {timestamp}.{raw_body}.

Body

application/json
id
string<uuid>
required
type
enum<string>
required
Available options:
order.created,
order.updated,
order.paid,
order.awaiting_verification,
order.failed,
order.expired,
order.refunded
created_at
string<date-time>
required
data
object
required

Response

200

Return any 2xx to acknowledge delivery.