Pagopa Payment Result

After a payment outcome, in addition to redirecting the user to returnUrl, you will receive a POST request to the URL you provided as postUrl.

In the body of this request, you will find a field called hash (string) that you can use to verify the legitimacy of the call. It corresponds to the sha256 hash of the following string: noticeNumber;recipient.taxCode;apiKey
You can recalculate the hash and verify that the two strings match.

If your server only accepts calls from specific IP addresses, add this IP to your whitelist: 52.143.182.78

curl --location --request POST 'https://yoursite.com/easypol/webhoowks' \ --header 'Content-Type: application/json' \ --data-raw '{ "id": "string", "noticeNumber": "string", "recipient": { "name": "Comune di Milano", "taxCode": "01199250158" }, "amount": 0.01, "resultCode": 0, "hash": "string" }'

Request

Responses