Source type

Square Source Configuration

Square sources receive payment, order, customer, inventory, and subscription events with Square signature verification.

SQUAREPOST, PUT, PATCH, DELETESignature KeyPayments
Square webhooks documentationAll source types
Square sends webhook traffic to a FastHook source, FastHook validates the provider contract, records the request, and routes accepted events through connections to destinations.SquareProviderPOST, PUT, PATCH, DELETESignedFastHookSource URLSQUAREProvider credentialsignatureVerify before queue401 on auth failure405 on wrong methodAcceptedRequestverified: trueConnections route the accepted request to destinationsFilters, transformations, retries, replay, and destination signatures stay downstream from source verification.

Square configuration

Create a Square source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Signature Key values for provider signature. FastHook uses these settings to validate each Square delivery before it enters the routing workflow.

Source Type

SQUARE

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

Signature Key

Square source config
{
  "type": "SQUARE",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "SQUARE",
      "webhook_signing_secret": "provider-secret"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

Square request contract

FastHook signs request URL + raw body with HMAC-SHA256 and compares the base64 digest to x-square-hmacsha256-signature.

POSTPUTPATCHDELETE

Square headers

Preserve x-square-hmacsha256-signature when sending Square test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

x-square-hmacsha256-signature

Base64 HMAC-SHA256 signature over notification URL + body.

Square setup

  1. Use the generated FastHook Source URL as the Square notification URL.
  2. Paste the Square signature key into FastHook.
  3. Do not add or remove query parameters after Square is configured because the URL is part of the signature input.

Continue with Square