Source type
Checkout.com Source Configuration
Checkout.com sources receive payment, dispute, payout, and account webhooks with Checkout.com signature verification.
Checkout.com configuration
Create a Checkout.com source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Secret Key values for provider signature. FastHook uses these settings to validate each Checkout.com delivery before it enters the routing workflow.
Source TypeCHECKOUT_COM
Allowed methodsPOST, PUT, PATCH, DELETE
AuthenticationProvider signature
Credential fieldsSecret Key
{
"type": "CHECKOUT_COM",
"config": {
"auth_type": "PROVIDER_SIGNATURE",
"auth": {
"provider": "CHECKOUT_COM",
"webhook_signing_secret": "secret-key"
},
"allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
}
}Checkout.com request contract
FastHook computes HMAC-SHA256 hex over the raw request body with the configured secret key and compares it with cko-signature.
Checkout.com headers
Preserve cko-signature when sending Checkout.com test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.
cko-signatureCheckout.com webhook signature generated with the secret key.
Checkout.com setup
- Configure the Checkout.com webhook endpoint with the generated FastHook Source URL.
- Copy the Checkout.com secret key into FastHook.
- Route by event type such as payment_approved, payment_declined, or dispute events.