Webhook event

Card Authorization Request

POSTCARD_AUTHORIZATION_REQUEST

Sent synchronously to an External-authorization project. First Leeward POSTs the proposed authorization and blocks on your approve/decline decision, which you return in the HTTP response body within the request timeout. This is the only webhook whose response First Leeward consumes: a non-2xx, timeout, or unparseable body is treated as a decline (fail closed).

Body

application/json

idstringrequired

Unique event identifier for idempotency

typestringrequired

Webhook event type

Available options:CARD_AUTHORIZATION_REQUEST

dataobjectrequired

A real-time authorization request awaiting an approve/decline decision

Show child attributes

transactionIdstring<uuid>required

Identifier of the transaction this authorization belongs to. On the first authorization it is the id the transaction is created with; on an incremental authorization it is the id of the existing pending transaction being extended. Matches id on the subsequent transaction webhooks.

eventIdstring<uuid>required

Unique identifier for this authorization event. Appears as triggerEventId and within events on the subsequent transaction webhooks - use it to correlate this request with the async lifecycle.

accountIdstring<uuid>required

Account linked to the card

cardIdstring<uuid>required

Card used for this transaction

channelstringrequired

Transaction channel

Available options:ATMPOSECOMMERCEVISA_DIRECT

digitalWalletstring | nullrequired

Digital wallet used, or null if physical card

Available options:APPLE_PAYGOOGLE_PAYMERCHANT_TOKEN

currencystringrequired

Card currency

amountnumberrequired

Amount to authorize, charged to the cardholder (card currency)

originalCurrencystringrequired

Original transaction currency (merchant local currency)

originalAmountnumberrequired

Amount to authorize, in the original transaction currency

feesobjectrequired

Cardholder fee breakdown in the card billing currency. Always present; zeros when no fee applied.

Show child attributes

atmnumberrequired

ATM withdrawal markup charged to the cardholder (card currency)

fxnumberrequired

FX markup charged to the cardholder (card currency)

merchantobjectrequired

Merchant details

Show child attributes

cardAcceptorIdstring | nullrequired

Card acceptor ID (often called the merchant ID or MID), assigned by the merchant's acquirer and passed on by the card network. It is unique only within one acquirer, and one merchant can have several (for example one per terminal). Combine it with name, country, and mccCode when matching merchants. null when the network did not provide one.

namestringrequired

Merchant name

citystring | nullrequired

Merchant city

postCodestring | nullrequired

Merchant postal or ZIP code

statestring | nullrequired

Merchant state or province

countrystring

ISO 3166-1 alpha-2 country code

mccCodestringrequired

Merchant Category Code

mccCategorystringrequired

MCC category description

occurredAtstringrequired

ISO 8601 timestamp of when the authorization was initiated

Response

200Webhook received successfully. Return any 2xx status to acknowledge.