TRANSACTION_UPDATED webhook
Header Parameters
Signaturestring Required
Lowercase hex HMAC-SHA256 digest of API_KEY + TimeStamp + url, keyed with your
SECRET_KEY. url is the exact webhook URL registered for you. Recompute it on your
side and compare in constant time. The body is not part of the signed string.
TimeStampstring Required
Time the webhook was signed, format YYYY-MM-DD HH:MM:SS in UTC. Note the capital S.
Use this exact string when you recompute the signature.
Body Parameters
eventTypestring
Webhook event type label.
Enum values:
TRANSACTION_UPDATEDtransactionallof
The transaction object in a gift card TRANSACTION_UPDATED webhook, as sent to API publishers
(verified against the API code on 8 October 2026). Spendstream sends exactly one webhook per
purchase.
| Field | giftCardRequestApi (float) |
Hosted payment (paymentLink) |
|---|---|---|
UID, brand-name, date, transaction-id |
Yes | Yes |
order-id |
Empty (see the field note) | Yes, the order-id returned by paymentLink |
amount-spend |
Yes | Yes |
| `total-spendAm... |
Show child attributes
Response
200
Object
Any 2xx response is treated as delivered. The response body is ignored.
Was this section helpful?
Response
Was this section helpful?