Source type
GoCardless Source Configuration
GoCardless sources receive payment, mandate, subscription, payout, and customer event webhooks with endpoint-secret verification.
GoCardless configuration
Create a GoCardless source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Webhook Endpoint Secret values for provider signature. FastHook uses these settings to validate each GoCardless delivery before it enters the routing workflow.
Source TypeGOCARDLESS
Allowed methodsPOST, PUT, PATCH, DELETE
AuthenticationProvider signature
Credential fieldsWebhook Endpoint Secret
{
"type": "GOCARDLESS",
"config": {
"auth_type": "PROVIDER_SIGNATURE",
"auth": {
"provider": "GOCARDLESS",
"webhook_signing_secret": "webhook-endpoint-secret"
},
"allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
}
}GoCardless request contract
FastHook computes HMAC-SHA256 hex over the raw body with the webhook endpoint secret and compares it with webhook-signature.
GoCardless headers
Preserve webhook-signature when sending GoCardless test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.
webhook-signatureHMAC-SHA256 hex signature over the raw request body.
GoCardless setup
- Create a GoCardless webhook endpoint with the generated FastHook Source URL.
- Copy the webhook endpoint secret into FastHook.
- Route by resource_type and action fields for mandate, payment, and subscription workflows.