Testing Webhooks in Sandbox (Cybersource)

[rsaxena]

Hello, I'm trying to use Secure Acceptance to allow users to setup a card, and then use the API to capture payments on the card.

I wanted to be able to listen to webhooks regarding payment events, but so far in Sandbox (https://businesscentertest.cybersource.com/ebc2/app/) I've not been able to set them up successfully.

I first navigated to Webhooks in the Sandbox UI and added it, but that didn't seem to do anything, and I didn't receive any notifications after that. This is what it looks like:

After browsing some other threads, it seems like I need to explicitly subscribe to the webhook events I am interested in. There didn't seem to be any way to do it via the UI, so I found this API testing tool from Cybersource: https://developer.cybersource.com/api-reference-assets/index.html?stage=pilot#webhooks_create-new-we... , and created a webhook using this, for the event type: `"payments.payments.accept", "payments.payments.review", "payments.captures.accept", "payments.captures.review"`.

However, even after that, I didn't receive any webhooks when I created payments using the API.

Is there something I'm doing wrong? Or is this just not supported?

Thanks.

[kalemargret]

Thank you so much sharing for this informative information, I follow all these.

[JasonPaul]

In my view to set up webhooks for Secure Acceptance:

1. Verify your webhook URL is correct and publicly accessible.
2. Use the API to subscribe to specific event types you need.
3. Test your endpoint using CyberSource's webhook testing tool.
4. Check server logs for incoming webhook attempts.
5. If issues persist in sandbox, try testing with production test credentials.
Remember to implement proper security measures for webhooks in production

https://developer.cybersource.com/api-reference-assets/index.html?stage=pilot#webhooks_create-new-webhooks_create-a-webhook

Did you perform this as mention in the above link "Create a new webhook subscription. Before creating a webhook, ensure that a security key has been created at the top of this developer center section. You will not need to pass us back the key during the creation of the webhook, but you will receive an error if you did not already create a key or store one on file."

[rsaxena]

Thanks for the suggestion JasonPaul. After explicitly creating secrets via the API (previously I had done so only via the UI), I subscribed to certain events, and started receiving healthchecks. However whenever I actually create payments I don't get any events.

I subscribed to:

```
"productId": "tokenManagement",
"eventTypes": [
"tms.networktoken.provisioned",
"tms.token.updated",
"tms.token.pan_updated",
"tms.token.created",
"tms.networktoken.updated"
],

and

"productId": "cardProcessing",
"eventTypes": [
"payments.captures.accept",
"payments.captures.review",
"payments.payments.accept",
"payments.payments.review"
],

```

However, even when creating tokens and payments I'm not receiving anything.