{
"id": "8f14e45f-ceea-4e7a-9f1d-6b1c2a3d4e5f",
"event": "CHECKOUT_SESSION.CREATED",
"createdAt": "2026-04-24T09:13:33.883Z",
"data": {
"sessionId": "394102",
"merchantReference": "order-12345",
"amount": 5000,
"currency": "NGN",
"expiresAt": "2025-12-29T13:45:10.123Z",
"createdAt": "2025-12-29T13:30:22.554Z",
"metadata": {
"orderId": "order-456"
}
}
}Checkout Session Events
Afriex delivers a webhook to your configured URL when a hosted checkout session is created. It is the only checkout session event: it is sent once, when you create the session, and says nothing about payment. Track the payment with transaction events, and find the session’s deposit with GET /api/v1/transaction?reference=<merchantReference>.
Security: Every request includes an x-webhook-signature header. You must verify this signature using Afriex’s public key before processing. The key is an elliptic-curve (secp384r1 / P-384) key, not RSA. The signature is ECDSA with SHA-256, DER-encoded and then base64-encoded, computed over the exact raw request body, so verify it before parsing or re-serialising the JSON. See the Webhooks Overview & Security section for verification instructions.
{
"id": "8f14e45f-ceea-4e7a-9f1d-6b1c2a3d4e5f",
"event": "CHECKOUT_SESSION.CREATED",
"createdAt": "2026-04-24T09:13:33.883Z",
"data": {
"sessionId": "394102",
"merchantReference": "order-12345",
"amount": 5000,
"currency": "NGN",
"expiresAt": "2025-12-29T13:45:10.123Z",
"createdAt": "2025-12-29T13:30:22.554Z",
"metadata": {
"orderId": "order-456"
}
}
}Event Types
CHECKOUT_SESSION.CREATED- A new hosted checkout session has been created
Sample Payload
Checkout Session Created
{
"id": "a3cd37d4-ce8b-5b56-b298-67201b00cf5e",
"event": "CHECKOUT_SESSION.CREATED",
"createdAt": "2025-12-29T13:30:22.554Z",
"data": {
"sessionId": "394102",
"merchantReference": "order-12345",
"amount": 5000,
"currency": "NGN",
"expiresAt": "2025-12-29T13:45:10.123Z",
"createdAt": "2025-12-29T13:30:22.554Z",
"metadata": {},
"customer": {
"name": "John Doe",
"email": "john.doe@example.com",
"phone": "+2348192837465",
"countryCode": "NG"
}
}
}
sessionId is the checkoutId returned when you created the checkout. expiresAt is when the checkout stops accepting payment, 24 hours after you create it by default. Track the payment with Transaction Events, and find the session’s deposit with List Transactions and ?reference= set to the merchantReference.Body
Unique ID of this event. Every delivery attempt of the same event carries the same id, so use it to ignore a delivery you have already processed.
"8f14e45f-ceea-4e7a-9f1d-6b1c2a3d4e5f"
Identifies which checkout session event occurred
CHECKOUT_SESSION.CREATED "CHECKOUT_SESSION.CREATED"
When Afriex created the event. Retries keep this value, and the signature covers it, so you can reject a delivery that is older than you expect.
"2026-04-24T09:13:33.883Z"
Details of the checkout session
Show child attributes
Show child attributes
Response
Acknowledge receipt. Return any 2xx status code quickly. Response body is ignored.