Source type
PayPal Source Configuration
PayPal sources receive payment and checkout webhook events and verify PayPal's RSA transmission signature against the configured webhook id.
PayPal configuration
Create a PayPal source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Webhook ID values for provider signature. FastHook uses these settings to validate each PayPal delivery before it enters the routing workflow.
Source TypePAYPAL
Allowed methodsPOST, PUT, PATCH, DELETE
AuthenticationProvider signature
Credential fieldsWebhook ID
{
"type": "PAYPAL",
"config": {
"auth_type": "PROVIDER_SIGNATURE",
"auth": {
"provider": "PAYPAL",
"webhook_id": "WH-..."
},
"allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
}
}PayPal request contract
FastHook verifies the PayPal RSA signature over transmission id, time, webhook id, and CRC32 of the raw body.
PayPal headers
Preserve paypal-transmission-id, paypal-transmission-time, paypal-transmission-sig, paypal-cert-url, paypal-auth-algo when sending PayPal test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.
paypal-transmission-idTransmission id included in the signed payload.
paypal-transmission-timeTransmission time included in the signed payload.
paypal-transmission-sigBase64 RSA signature.
paypal-cert-urlPayPal certificate URL used for public key lookup.
paypal-auth-algoMust be SHA256withRSA.
PayPal setup
- Create a PayPal webhook endpoint with the generated FastHook Source URL.
- Copy the PayPal webhook id into FastHook.
- Keep sandbox and production PayPal sources separate.