Updates sent by the Bango Platform
The Bango Resale API is a RESTful API: you make requests, and the Bango Platform returns responses. However, in some cases the Bango Platform can send you updates without an explicit request from your code. There are three main use cases:
To receive a notification from the Bango Platform whenever a merchant or the Bango Platform changes an entitlement's status for any reason, set the
notificationUrl parameter when you create the entitlement (or later, by updating the entitlement).
Bango recommends you always set the
notificationUrl. Invalid URLs trigger an HTTP 400
The Bango Platform does not add or remove any query parameters from the URL you supply.
Always use HTTPS for notification URLs.
The Bango Platform does not include any credentials in the notification
POST headers. Bango suggests you use notification URLs that are publicly accessible but not widely known, with safeguards to detect malicious activity. Some suggestions:
extensionDataor in the notification URL (as a path parameter or query parameter), and validate it on receipt of a notification