Integration

curl -X POST \
	-H "Content-Type: application/json" \
	-H "ApiKey: YOUR_API_KEY" \
	-H "MerchantId: YOUR_MERCHANT_ID" \
	-H "Environment: sandbox" \
	-d '{ "url": "https://my.webhook.target", "events": ["payment.created", "payment_intent.created"], "description": "Webhook triggered on payment and payment intent creation", "metadata": {} }' \
https://api.hub2.io/webhooks

import fetch from 'node-fetch';

async function createWebhook() {
		const response = await fetch('https://api.hub2.io/webhooks', {
				method: 'POST',
				headers: {
						'Content-Type': 'application/json',
						'ApiKey': 'YOUR_API_KEY',
						'MerchantId': 'YOUR_MERCHANT_ID',
						'Environment': 'sandbox', // or 'live'
				},
				body: JSON.stringify({
						url: 'https://my.webhook.target',
						events: ['payment.created', 'payment_intent.created'],
						description: 'Webhook triggered on payment and payment intent creation',
						metadata: {},
				}),
		});

		if (response.ok) {
				const result = await response.json();
				console.log(result);
		} else {
				console.log(`HTTP Status: ${response.status}`);
		}
}

createWebhook();

import requests

url = 'https://api.hub2.io/webhooks'

headers = {
		'Content-Type': 'application/json',
		'ApiKey': 'YOUR_API_KEY',
		'MerchantId': 'YOUR_MERCHANT_ID',
		'Environment': 'sandbox',  # or 'live'
}

data = {
		'url': 'https://my.webhook.target',
		'events': ['payment.created', 'payment_intent.created'],
		'description': 'Webhook triggered on payment and payment intent creation',
		'metadata': {},
}

response = requests.post(url, headers=headers, json=data)

if response.ok:
		print(response.json())
else:
		print(f'HTTP Status: {response.status_code}')

// Example with Node.js
import { createHmac } from 'crypto';

function sign(t, rawBody, secret) {
	return createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
}

# Example with Python
import hashlib
import hmac

def sign(t, raw_body, secret):
	message = f"{t}.{raw_body}"
	return hmac.new(secret.encode('utf-8'), message.encode('utf-8'), hashlib.sha256).hexdigest()

// Example with Java 17+
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.GeneralSecurityException;
import java.util.HexFormat;

public String sign(String t, String rawBody, String secret) {
	try {
		Mac mac = Mac.getInstance("HmacSHA256");
		mac.init(new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
		byte[] hmacBytes = mac.doFinal((t + "." + rawBody).getBytes(StandardCharsets.UTF_8));
		return HexFormat.of().formatHex(hmacBytes);
	} catch (GeneralSecurityException e) {
		throw new IllegalStateException(e);
	}
}

# Example with Ruby
require 'openssl'

def sign(t, raw_body, secret)
	OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), secret, "#{t}.#{raw_body}")
end

// Example with C#
using System;
using System.Security.Cryptography;
using System.Text;

public string Sign(string t, string rawBody, string secret)
{
	using (var hmac = new HMACSHA256(Encoding.UTF8.GetBytes(secret)))
	{
		byte[] hashBytes = hmac.ComputeHash(Encoding.UTF8.GetBytes($"{t}.{rawBody}"));
		return BitConverter.ToString(hashBytes).Replace("-", "").ToLower();
	}
}

// Example with PHP
function sign($t, $rawBody, $secret) {
	return hash_hmac('sha256', "{$t}.{$rawBody}", $secret);
}