#MeInTheMatrix
prime warren
gleaming cypress
Hello! That usually happens when you're either using the wrong Webhook Signing Secret, or when you're not passing the raw body of the incoming request to the event creation method.
Can you post your code in this thread instead of the main channel please?
balmy wraith
Did you check out my code? thank tho
app.post("/webhook", express.raw({ type: "application/json" }), async (req, res) => {
const sig = req.headers["stripe-signature"];
const rawBody = req.body.toString('utf8');
try {
const event = stripe.webhooks.constructEvent(
rawBody,
sig,
process.env.STRIPE_WEBHOOK_SECRET
);
// Handle the event based on its type
switch (event.type) {
case "checkout.session.completed":
// Handle the successful completion of a checkout session
const session = event.data.object;
const order = await Order.findById(session.client_reference_id);
order.status = "Paid";
order.address = session.shipping.address;
await order.save();
break;
// Add more cases to handle other webhook events as per your requirements
default:
console.log(`Unhandled event type: ${event.type}`);
}
res.sendStatus(200);
} catch (err) {
console.error(err);
return res.status(400).send(`Webhook Error: ${err.message}`);
}
});
I need help man
my Webhook Signing Secret is correct
gleaming cypress
This is almost certainly not providing the raw body: const rawBody = req.body.toString('utf8');
Node middleware will often alter the body of the request before this code would run. Basically you need to extract a raw copy of the request early in the process before most or all other middleware runs.
gleaming cypress
Yeah, you don't want to modify it at all. JSON.stringify modifies it.
You need the raw, unaltered, unparsed body.
There are several potential solutions in this thread: https://github.com/stripe/stripe-node/issues/341
Unfortunately there isn't a single "this always works" method when using Node.
gleaming cypress
One thing: if you're on localhost that means you're using stripe listen to forward the Events, correct?
gleaming cypress
Just want to be sure you're using the secret Stripe CLI is providing when you run that command, right?
The one where it says something like > Ready! You are using Stripe API Version [2020-08-27]. Your webhook signing secret is whsec_•••, you're using that whsec_ secret in your code?
balmy wraith
yes
the secret is alright same secret from the dashboard
man this issue been bothering me for 2 days
is express.json() middlware causing this issue?
gleaming cypress
Probably.