Skip to main content
GET
Retrieve the authorization webhook

Authorizations

X-API-Key
string
header
required

User API key authentication. Create a key under Settings → API keys in the Slash dashboard (https://app.slash.com/global-settings/api-keys) and send the x-legal-entity header naming the legal entity to act on with every request. Keys scoped to a legal entity are rejected with 403 user_api_key_required.

Headers

The legal entity to act on. Required on every request except GET /v2/legal-entities, which lists the ids a user API key can send here: those of every legal entity its user has access to.

Pattern: ^le_[a-zA-Z0-9]+$

Path Parameters

accountId
string
required

Account id with the sa_group_ prefix.

Response

The authorization webhook.

An endpoint of yours that approves or declines each card authorization on an account before Slash answers the card network. An account has at most one.

webhookUrl
string
required

Where Slash sends authorization requests.

Example:

"https://example.com/slash/authorize"

signingSecret
string
required

Signs every request Slash sends. It is set when the webhook is created and does not change.

status
enum<string>
required

Slash only sends requests to an active webhook.

Available options:
active,
inactive
timeoutDurationMs
integer
required

How long Slash waits for an answer before applying config, in milliseconds.

Example:

1500

config
AuthorizationWebhookConfigReject · object
required

Decline the authorization.

createdAt
string<date-time>
required
updatedAt
string<date-time>
required