get
https://{merchant-callback-host}/webhook/overview
基本约定
| 项 | 说明 |
|---|---|
| 请求方式 | POST |
| Content-Type | application/json |
| 回调地址 | 商户在控制台配置（建议 HTTPS） |
| 成功响应 | 尽快返回 HTTP 2xx |
| 失败/超时 | 平台延迟多次补发（PENDING→SUCCESS/DEAD） |
| 幂等 | body 内 eventId 去重 |
| 安全 | X-Cafinx-Signature：对原始 body 字节 RSA-SHA256 |
推送请求头
| 请求头 | 说明 |
|---|---|
X-Cafinx-Event | 事件类型，同 body.eventType |
X-Cafinx-Timestamp | 毫秒时间戳 |
X-Cafinx-Signature | Base64(RSA-SHA256(原始 body)) |
外层信封
{
"eventId": "evt_xxx",
"eventType": "transaction.authorized",
"timestamp": 1710000000000,
"userNo": "CFX-XXXX",
"data": { }
}与上游 GEO type 对照
| GEO type | 本平台 eventType |
|---|---|
| card_transaction | transaction.authorized / declined / refunded / reversed / settled |
| card_operate | card.issued / recharge.succeeded / withdraw.succeeded / frozen / unfrozen / closed / card_group.* |
| card_3ds_otp | card.3ds.otp |
验签要点
- 公钥：控制台或
GET /v1/developer/app-public-key - 必须对未解析的原始 body验签
- 完整指南见 Docs → Webhook
Recent Requests
Log in to see full request history
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Loading…