Payments & webhooks
Payment methods, Stripe, VietQR, and the webhook endpoint.
Checkout captures payment through configurable methods.
Methods
- Stripe — card payments. Configure per store.
- VietQR — bank-transfer QR for the Vietnamese market.
- Other methods can be enabled per store as supported.
Stripe webhook
Stripe notifies the platform of payment events at a per-store endpoint:
POST /api/webhooks/stripe/<store_slug>
Each store verifies the event with its own webhook signing secret (HMAC), so the endpoint is authenticated by signature rather than a bearer token. Configure the endpoint URL + secret in your Stripe dashboard and the store's payment settings.
Warning
The webhook must reach your platform host publicly. In local dev, tunnel it (e.g.
Stripe CLI) to localhost. Always verify the signature — never trust unsigned
payloads.
Order effects
A successful payment creates/updates the order's invoice and advances its status. See Orders & sales.