Step 6 - Handle the post-payment responses (notifications)
PayTabs Mobile SDKs streamline the integration process with the PayTabs payment gateway by offering a pre-configured payment interface. This interface efficiently manages card data entry, billing and shipping information, and automatically supplements any missing details required to complete the transaction flow.
The PayTabs Native Android SDK do not provide built-in support for handling or managing callbacks or Instant Payment Notifications (IPNs). Post-payment notifications or responses dispatched by PayTabs to the IPN endpoints configured within the PayTabs Merchant Dashboard are intended to be processed exclusively on the merchant's backend systems (server-to-server integration).
It is the responsibility of the merchant to implement appropriate backend logic to receive, validate, and handle these IPNs. Subsequently, any relevant transactional data or status updates derived from the IPN should be securely transmitted to the mobile application via an internal API or web service. This intermediary layer should ensure that only the necessary and contextually appropriate information is exposed to the mobile client, in alignment with the merchant’s business logic and operational requirements.
To know more about the IPNs and how to configured it in your PayTabs dashboard and manage them please check our How to configure Instant Payment notification (IPN)? solution article.
The integrity and authenticity of the IPN (Instant Payment Notification) or callback JSON payload received from PayTabs MUST be validated on the merchant server side. This validation must involve a comparison between the received data and the original order or cart details previously stored on the merchant’s backend systems.
This process ensures that the transactional data transmitted from the client-side has not been tampered with or intercepted during transit. Failure to perform this verification may result in processing fraudulent or manipulated transactions. Therefore, implementing robust validation mechanisms is essential to maintain data integrity and safeguard the payment workflow.
To enhance transactional security for mobile SDK integrations, PayTabs implements a preflight validation step. This mechanism reconfirms the cart details with the merchant’s backend prior to initiating the payment process, effectively mitigating the risk of client-side manipulation of cart amounts. For more details please check our solution article How to configure an additional security layer for my mobile application via PayTabs' SDKs? (PreFlight SDK Mode)