Skip to main content
PATCH
Update the authorization webhook

Authorizations

X-API-Key
string
header
required

User API key authentication. Create a key under Settings → API keys in the Slash dashboard (https://app.slash.com/global-settings/api-keys) and send the x-legal-entity header naming the legal entity to act on with every request. Keys scoped to a legal entity are rejected with 403 user_api_key_required.

Headers

The legal entity to act on. Required on every request except GET /v2/legal-entities, which lists the ids a user API key can send here: those of every legal entity its user has access to.

Pattern: ^le_[a-zA-Z0-9]+$

Path Parameters

accountId
string
required

Account id with the sa_group_ prefix.

Body

application/json

Omitted fields keep their value.

webhookUrl
string

Where Slash sends authorization requests.

Example:

"https://example.com/slash/authorize"

status
enum<string>

Slash only sends requests to an active webhook.

Available options:
active,
inactive
config
AuthorizationWebhookConfigReject · object

Decline the authorization.

Response

The authorization webhook.

An endpoint of yours that approves or declines each card authorization on an account before Slash answers the card network. An account has at most one.

webhookUrl
string
required

Where Slash sends authorization requests.

Example:

"https://example.com/slash/authorize"

signingSecret
string
required

Signs every request Slash sends. It is set when the webhook is created and does not change.

status
enum<string>
required

Slash only sends requests to an active webhook.

Available options:
active,
inactive
timeoutDurationMs
integer
required

How long Slash waits for an answer before applying config, in milliseconds.

Example:

1500

config
AuthorizationWebhookConfigReject · object
required

Decline the authorization.

createdAt
string<date-time>
required
updatedAt
string<date-time>
required