Mobupay

Accept card payments with Mobupay: POST /pay creates a hosted payment link and logs the order (pending), POST /mobupay-webhook receives Mobupay's signed webhooks, verifies the HMAC-SHA256 signature (V2, anti-replay 5 min window) on the raw body, and marks the order paid/failed/refunded. Validated end-to-end. Setup: 1. Set two environment variables in your workspace: MOBUPAY_API_KEY (sk_test_... or sk_live_...) and MOBUPAY_WEBHOOK_SECRET (whsec_...), both from your Mobupay merchant dashboard. 2. In /pay, replace redirectUrl (your thank-you page) and notificationUrl (the public URL of YOUR /mobupay-webhook endpoint, shown in its settings). A Mobupay merchant account is required: https://mobupay.nc Step-by-step guide (French): https://docs.mobupay.nc/guides/no-code/xano More no-code recipes: https://docs.mobupay.nc/guides/no-code