A POST
callback will be sent to notification with the following form will be sent to notificationUrl
once the enough is paid and once again once there is enough confirmations to the payment:
@Model.ExampleCallback
Never trust anything but id
, ignore the other fields completely, an attacker can spoof those, they are present only for backward compatibility reason:
- Send a
GET
request to https://btcpay.example.com/invoices/{invoiceId}
with Content-Type: application/json; Authorization: Basic YourLegacyAPIkey"
, Legacy API key can be created with Access Tokens in Store settings
- Verify that the
orderId
is from your backend, that the price
is correct and that status
is settled
- You can then ship your order