Catalog SDK Webhooks

Catalog SDK webhooks notify your backend when a hosted Catalog SDK order reaches a final fulfillment outcome.

Setup

Set up your backend webhook URL for Catalog SDK order updates in the IIMMPACT dashboard.

IIMMPACT sends a POST request to your webhook URL when the order reaches a final outcome. Supported event types are order.completed and order.timeout.

Webhook requests include this signature header:

X-Webhook-Signature: sha256=<hex hmac sha256 of raw request body>

Verify the signature with your Catalog SDK webhook secret before processing the event.

Sample Payload

{
  "type": "order.completed",
  "order_id": 12345,
  "user_id": "customer-123",
  "total_amount": "25.00",
  "refund_amount": "5.00",
  "status": "completed",
  "payment_reference": "client-payment-ref-123",
  "completed_at": "2026-05-05T10:05:00.000Z",
  "items": [
    {
      "product_code": "D10",
      "account_number": "60123456789",
      "amount": "10.00",
      "quantity": 2,
      "extras": {
        "foo": "bar"
      },
      "transactions": [
        {
          "refid": "sdk-abc-1",
          "status": "successful",
          "status_code": 20,
          "sn": "SN-123",
          "pin": "PIN-123",
          "expiry": "20290309",
          "voucherlink": "https://example.com/voucher",
          "remarks": "Success"
        },
        {
          "refid": "sdk-abc-2",
          "status": "failed",
          "status_code": 52,
          "sn": "",
          "pin": "",
          "expiry": "",
          "voucherlink": "",
          "remarks": "Invalid Account No"
        }
      ]
    }
  ]
}

Response And Retries

Respond with any 2xx status after your backend accepts the webhook. IIMMPACT retries temporary failures; 4xx responses other than 429 are treated as terminal delivery failures.