controller_buckaroo_webhook

Handle Buckaroo checkout callbacks.

Accept JSON POST pushes at /buckaroo/webhook and /buckaroo/webhook/:payment_nr. Verify the authorization header over the original body before decoding and processing the transaction. Verified debit updates enter the shared receive policy; processing failures return 500 for retry.

Generate the endpoint through its dispatch rule, for example:

{% url buckaroo_payment_webhook_generic %}

This provider-facing endpoint uses the verification described above rather than an administrator login.