fabbelevin | Stripe Developers | Page 1

languid pawnBOT Aug 14, 2023, 1:22 PM

#

verbal anvil Aug 14, 2023, 1:24 PM

#

This thread also has a couple of Express-specific fixes I believe https://github.com/stripe/stripe-node/issues/341

GitHub

Webhook signature verification and bodyParser.json issue · Issue #3...

If you use in your express app bodyParser.json() for all routes, and then have a dedicated route for stripe's webhook, then the second call to bodyParser.json({verify: ...}) as done in the exam...

wild mountain Aug 14, 2023, 1:57 PM

#

I've tried most of this, most of them use rawBody which has been removed. I've tried a lot more now as well but nothing is working still. Do you know of any more places I can find more information?

#

Or I might just have found a solution actually!

#

It's not the prettiest and I'm not sure it can be used in production though but I might be on the way to solve it. But if you have more infromation I would be glad to read it, otherwise I think I can figure this out. Thanks!

verbal anvil Aug 14, 2023, 2:03 PM

#

I can look for other solutions again in a bit. If you do a more general search for "express, raw request body" you may find other more modern solutions as well

wild mountain Aug 14, 2023, 2:09 PM

#

Have almost gone through the whole first page of that google search. If you have time it would be nice! I'm starting to round of the day today but if you find anything interesting I will read it tomorrow! Thanks for the help!

languid pawnBOT Aug 14, 2023, 2:10 PM

#

azure plover Aug 14, 2023, 2:20 PM

#

Are you sure that the issue is with the request body format? You may also see the signature verification failure error if you're using the wrong webhook siging secret.

What happens when you try printing the incoming request body? What are you seeing in your console?

wild mountain Aug 14, 2023, 2:25 PM

#

Yes, I managed to get it to work by getting the raw format to just my stripe webhook endpoint in a weird way. But the implementation isn’t the best I don’t think. So I should be using the correct webhoook signing secret at least, otherwise I don’t think my “ugly” solution would work

#fabbelevin