Developer APIs

Generate and manage your API keys for integration.

Loading keys...

Webhook Endpoints

Receive real-time POST notifications when events happen. You can add up to 5 endpoints.

Loading webhooks...

Verifying Webhook Signatures

Every request from Arizona Global Bank includes an x-arizona-signature header. Verify it using HMAC-SHA256:

const crypto = require('crypto');

function verifyArizonaWebhook(body, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(body))
    .digest('hex');
  return expected === signature;
}