On this page
No Headings
Oauth 2.0 authentication
Client CredentialsToken URLhttps://api-m.sandbox.paypal.com/v1/oauth2/tokenInheaderScopes
https://uri.paypal.com/services/applications/webhookshttps://uri.paypal.com/services/applications/verify-webhook-signatureapplication/json
TypeScript Definitions
Use the request body type in TypeScript.
application/json
application/json
curl -X POST "https://api-m.sandbox.paypal.com/v1/notifications/verify-webhook-signature" \ -H "Content-Type: application/json" \ -d '{ "auth_algo": "string", "cert_url": "http://example.com", "transmission_id": "string", "transmission_sig": "string", "transmission_time": "2019-08-24T14:15:22Z", "webhook_id": "string", "webhook_event": {} }'{
"verification_status": "SUCCESS"
}{
"name": "string",
"message": "string",
"debug_id": "string",
"information_link": "string",
"details": [
{
"field": "string",
"value": "string",
"location": "body",
"issue": "string",
"description": "string"
}
],
"links": [
{
"href": "string",
"rel": "string",
"method": "GET"
}
]
}The algorithm that PayPal uses to generate the signature and that you can use to verify the signature. Extract this value from the PAYPAL-AUTH-ALGO response header, which is received with the webhook notification.
^[a-zA-Z0-9]+$length <= 100The X.509 public key certificate. Download the certificate from this URL and use it to verify the signature. Extract this value from the PAYPAL-CERT-URL response header, which is received with the webhook notification.
urilength <= 500The ID of the HTTP transmission. Contained in the PAYPAL-TRANSMISSION-ID header of the notification message.
^(?!\d+$)\w+\S+length <= 50The PayPal-generated asymmetric signature. Appears in the PAYPAL-TRANSMISSION-SIG header of the notification message.
^(?!\d+$)\w+\S+length <= 500The date and time of the HTTP transmission, in Internet date and time format. Appears in the PAYPAL-TRANSMISSION-TIME header of the notification message.
date-timelength <= 100The ID of the webhook as configured in your Developer Portal account.
^[a-zA-Z0-9]+$length <= 50A webhook event notification.