For the basic signature, when the callback occurs, Zuora signs the tenant ID, Payment Page ID, a generated Token, and a timestamp with the private key, and add the signature to the callback URL. Upon ...For the basic signature, when the callback occurs, Zuora signs the tenant ID, Payment Page ID, a generated Token, and a timestamp with the private key, and add the signature to the callback URL. Upon receiving the signature, the client verifies the signature using the public key, and comparing the values with the parameter values on the URL.
Provides suggestions and guidance on the implementation of your own necessary security infrastructure and Zuora’s out-of-box security measures for Payment Pages 2.0 (HPM 2.0)
