Order settlement (store sales)
Payment providers POST to Join Markt webhook routes under/api/.... Signatures are verified with the secrets configured in platform or store settings. Reject invalid signatures with 401.
Deep reference: Incoming Webhooks.
SaaS subscription (vendor plans)
Crypto upgrades for Premium / Business use a dedicated IPN:order_id values are prefixed with saas_. On finished / confirmed, Join Markt grants or extends the plan.
Implementation tips
- Endpoints must be public HTTPS (no localhost without a tunnel)
- Respond quickly with
2xx; do heavy work after ack if needed - Treat webhooks as at-least-once — make handlers idempotent
- Log
payment_id/order_idfor support