Airwallex logo
Airwallex logoAirwallex logo

Configure webhooks

Set up webhook notifications and the processing job to keep SFCC order statuses in sync with Airwallex.

Copy for LLMView as Markdown

To keep order statuses in sync between Airwallex and your Salesforce Commerce Cloud (SFCC) storefront, configure webhooks so Airwallex can notify your storefront about asynchronous payment events such as successful payments and refunds.

Before you begin

  • You have configured Airwallex settings in Business Manager.
  • You have access to the Airwallex web app to create webhook endpoints.

Register the webhook URL in Airwallex

  1. In Business Manager, go to Merchant Tools > Site Preferences > Airwallex Settings and copy the Webhook URL.

  2. Log in to the Airwallex web app .

  3. Go to Settings > Developer > Webhooks and create a new webhook.

  4. Paste the copied URL into the Notification URL field.

  5. Subscribe to the following events:

    • payment_intent.succeeded
    • refund.accepted

  6. Copy the Webhook Secret that Airwallex generates.

Save the webhook secret in Business Manager

  1. In Business Manager, go to Merchant Tools > Site Preferences > Airwallex Settings.

  2. Paste the webhook secret into the Webhook Secret field for the active environment.

  3. Save your changes.

Enable the webhook processing job

The AirwallexProcessWebhooks job processes queued webhook events every 5 minutes. It is created during the metadata import, but you need to verify it is enabled and configured for your site.

  1. In Business Manager, go to Administration > Operations > Jobs.

  2. Find AirwallexProcessWebhooks.

  3. Open the job and verify:

    • The Site Context is set to your site ID (update it if needed).
    • The schedule is set to run every 5 minutes.

  4. If the job is not already enabled, click Enable or toggle it on.

The job processes up to 100 pending webhook events per run, with up to 3 retries for failed events. Completed events are automatically cleaned up after 30 days.

How webhooks work

  1. Airwallex sends a POST request to your webhook endpoint with the event payload.

  2. The cartridge verifies the request signature using HMAC-SHA256 with your webhook secret and the x-signature / x-timestamp headers.

  3. Requests with timestamps older than 5 minutes are rejected for replay attack protection.

  4. Valid events are enqueued as AirwallexWebhookEvent custom objects for asynchronous processing.

  5. The scheduled job processes queued events and updates order statuses accordingly.

Next steps

Now that you have configured webhooks, verify your full setup before switching to production:

Was this page helpful?