Adyen standard webhooks. A delivery is an envelope
{ "live": "false", "notificationItems": [ { "NotificationRequestItem": {…} } ] };
JSON deliveries carry exactly one item (only the legacy SOAP transport batched
up to six), and both live and success are the STRINGS "true"/"false" —
never booleans, so they are compared to the exact string ("false" is truthy).
Verification is HMAC-SHA256 over eight colon-joined field values, base64, sent
inside the payload at additionalData.hmacSignature. The Customer Area key is
HEX and is decoded to bytes before signing.
Adyen standard webhooks. A delivery is an envelope
{ "live": "false", "notificationItems": [ { "NotificationRequestItem": {…} } ] }; JSON deliveries carry exactly one item (only the legacy SOAP transport batched up to six), and bothliveandsuccessare the STRINGS "true"/"false" — never booleans, so they are compared to the exact string ("false" is truthy).Verification is HMAC-SHA256 over eight colon-joined field values, base64, sent inside the payload at
additionalData.hmacSignature. The Customer Area key is HEX and is decoded to bytes before signing.