Get notified about refund status changes

Merchants can receive real-time event data by providing URL endpoints to receive Event JSON Payloads via POST requests

If you do not receive the notifications, please contact our support engineer for assistance and we will subscribe to them on behalf of the merchants.

Webhook Security

• We implement a security layer for our webhook request and utilize Event ID as an idempotency key to prevent the occurrence of duplicate webhook requests.

• Any webhook request exceeding 15 minutes should be rejected by the Partner to mitigate potential security risks.

• Coda will provide IP for whitelisting for webhook request

Request Header Description

Header	Description
X-Request-Time	This header contains a timestamp in UTC format and it indicates the time when a webhook request was sent.
X-Signature	This header involves the HMAC 512 Algorithm
X-Version	This header contains a version number

How to accept notifications?

1. Validate signature

2. Validate Event ID as an idempotency key

3. Response with 202 Accepted HTTP Code

Note: Coda strongly recommends Merchants use Retrieve Refund Status API for the fallback of getting an update of refund status, in case notification failed to be sent.

Event Object

Parameter name	Type	Description
id	String	Event notification ID generated by the
Event Type	String	Contains the refund status. For more information on the possible refund statuses, refer to this.