value and currency come from the nested amount object. Adyen documents no
escaping rule for values that themselves contain the delimiter, so a value
carrying ":" or "" makes the signed payload ambiguous: two different item sets
can produce the same string, which is exactly what a signature must exclude.
Such a delivery is refused (never silently accepted, never escaped by a rule
Adyen would not apply on its side).
The eight signed values, colon-joined in Adyen's documented order, with an empty string for any absent field:
pspReference:originalReference:merchantAccountCode:merchantReference:value:currency:eventCode:success
valueandcurrencycome from the nestedamountobject. Adyen documents no escaping rule for values that themselves contain the delimiter, so a value carrying ":" or "" makes the signed payload ambiguous: two different item sets can produce the same string, which is exactly what a signature must exclude. Such a delivery is refused (never silently accepted, never escaped by a rule Adyen would not apply on its side).