Partner postbacks and affiliate networks
You can track Andalu sales through Awin, Impact and CJ, or through your own tracker. We keep each network's click id with the click, and send a signed server-to-server postback each time a sale moves on: once the buyer's payment is taken, once its hold ends, and if it is reversed. Each postback carries a signature you check with your secret.
Set up a postback
- 1
In your hub, open Settings and enter your Postback URL.
- 2
Copy your postback secret. It is shown once, so keep it safe.
- 3
Select Send a test, and check your tracker received it.
Verify a postback
- 1
Read the
Andalu-Signatureheader. It holds a time,t, and a signature,v1. - 2
Join the time, a dot and the raw request body, and sign that with your secret using HMAC-SHA256.
- 3
Compare your result with
v1. If they differ, or the time is more than a few minutes old, ignore the call.