Adyen standard webhooks. A delivery is an envelope
{ "live": "false", "notificationItems": [ { "NotificationRequestItem": {…} } ] };
a JSON delivery carries exactly one item (SOAP deliveries may carry up to
six), and the adapter reads the JSON method only: HTTP POST and SOAP bodies
are not JSON, so they fail verification. live and success are the STRINGS
"true"/"false" — never booleans, so they are compared to the exact string
("false" is truthy).
Verification is HMAC-SHA256 over eight colon-joined field values, base64, sent
inside the payload at additionalData.hmacSignature. The Customer Area key is
HEX and is decoded to bytes before signing.
Adyen standard webhooks. A delivery is an envelope
{ "live": "false", "notificationItems": [ { "NotificationRequestItem": {…} } ] }; a JSON delivery carries exactly one item (SOAP deliveries may carry up to six), and the adapter reads the JSON method only: HTTP POST and SOAP bodies are not JSON, so they fail verification.liveandsuccessare the STRINGS "true"/"false" — never booleans, so they are compared to the exact string ("false" is truthy).Verification is HMAC-SHA256 over eight colon-joined field values, base64, sent inside the payload at
additionalData.hmacSignature. The Customer Area key is HEX and is decoded to bytes before signing.