Vote callback integration

Use the callback to credit a player after a vote has been confirmed. Configure the callback URL and rotate its private key from your listing’s vote-link settings.

Request

After confirmation, the index sends an authenticated HTTPS GET request to your callback URL. The request includes userid, status, site_id, and vote_id. The private key is sent in the Authorization header, never in the URL.

Handle callbacks safely

• Require HTTPS and validate the authorization key using a constant-time comparison.
• Credit only confirmed votes and treat vote_id as an idempotency key so retries cannot award twice.
• Return a successful HTTP status after processing. Reject invalid keys or incomplete requests.
• Do not log the authorization header or expose the private key in client-side code.

Use the test action on your vote-link settings page to check that your endpoint is reachable before relying on it.