# Paystack integration notes

Official references consulted:

- Accept Payments: https://paystack.com/docs/payments/accept-payments/
- Verify Payments: https://paystack.com/docs/payments/verify-payments/
- Webhooks: https://paystack.com/docs/payments/webhooks/

Implementation requirements captured from the official documentation: initialize transactions server-side, redirect the customer to the returned authorization URL, and verify the transaction server-side before issuing paid tickets. Paystack webhooks are preferred for final payment confirmation; webhook authenticity must be checked using the `x-paystack-signature` HMAC-SHA512 signature computed with the Paystack secret key. The verification must also validate the expected amount, currency, order reference, and idempotently avoid issuing tickets twice.