<!--
{
  "availability" : [
    "App Store Server Notifications: 2.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "AppStoreServerNotifications",
  "identifier" : "/documentation/AppStoreServerNotifications/signedPayload",
  "metadataVersion" : "0.1.0",
  "role" : "Type",
  "symbol" : {
    "kind" : "Type",
    "modules" : [
      "App Store Server Notifications"
    ],
    "preciseIdentifier" : "data:store_s2s:signedPayload"
  },
  "title" : "signedPayload"
}
-->

# signedPayload

A cryptographically signed payload, in JSON Web Signature (JWS) format, that contains the response body for a version 2 notification.

```
string signedPayload
```

## Discussion

The `signedPayload` is a string of three Base64URL-encoded components, separated by a period. The string contains a JWS representation of the notification response body, signed by the App Store according to the JSON Web Signature (JWS) [IETF RFC 7515](https://datatracker.ietf.org/doc/html/rfc7515) specification.

The three components of the string are a header, a payload, and a signature, in that order.

To read the notification response body, Base64URL-decode the payload. Use a [`responseBodyV2DecodedPayload`](/documentation/AppStoreServerNotifications/responseBodyV2DecodedPayload) object to read the payload information.

To read the header, Base64URL-decode it and use a [`JWSDecodedHeader`](/documentation/AppStoreServerNotifications/JWSDecodedHeader) object to access the information. Use the information in the decoded header to verify the signature.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)