Callback

In some cases, you may no need the expired notification status, so it depends on merchant to use and validated the expired callback.

Newest version of IFP API is returning the mcp-signature in header. This is the digital signature for your request. Always check and compare our mcp-signature header with your order signature first, to ensure that the callback is true and match with your order detail, before you update your transaction order status based on the callback value.

Please make sure to always return Http Status Code 200 to MCP

Our Notification Callback will retrying 3 times if the requirement above doesn't satisfied.

IFP's Callback Header

Key	Value
Content-Type	application/json
mcp-signature	sha256(transactionid+x-req-signature+submerchantid)