OnlyFansEndpoints
Handle a CoinGate payment callback.
CoinGate permanently terminates an order's callback chain on 301, 302, 401 and 403 responses, so anything we cannot verify (unknown order, wrong per-order token) is logged and acknowledged with 200; 5xx is reserved for failures on our side that a retry can fix. The callback body itself is untrusted — CryptoTopupService re-verifies the order against CoinGate's Get Order endpoint before crediting anything.
Fields are read via input() so both delivery formats (JSON and form-encoded, a per-API-App dashboard setting) are supported.
Authorization
default AuthorizationBearer <token>
Get your API Key from OnlyFansAPI Console - https://app.onlyfansapi.com/api-keys
In: header
Response Body
curl -X POST "https://app.onlyfansapi.com/api/webhooks/coingate"