venerios

[wheat atlas]

What error do you receive?

[magic island]

I'm not receiving any errors

There's just nothing going on

I have deactivated the windows firewalls on my workstation as your colleague advised yesterday, but still nothing.

[wheat atlas]

What is outputed on the terminal of stripe listen forward?

[magic island]

Here's what I currently have on the CLI and Dashboard

[wheat atlas]

If you just stripe listen, will it receive the event?

[magic island]

No we tried with your colleague and it gives the same result, I receive nothing

With Postman, I receive the request on my backend.

[wheat atlas]

That's weird... so even stripe listen doesn't receive anything

[magic island]

Is this a stripe server sending me an http request? Because it could be the company's firewall, but I'd need more information (Port, Protocol) to generate a rule that would allow the company to receive requests from a stripe server

[wheat atlas]

Yes Stripe server sending you. You would want to whitelist everything from https://stripe.com/docs/ips#webhook-notifications

[magic island]

Who's establishing the connection in this configuration? Is this the CLI or Stripe server itself? Our firewall does not really have a concept of whitelist, it only allows/blocks packets based on the protocol and port. HTTP(S) and the standard 80/443 ports should all be okay. Although, if the TCP connection is opened by the server, this could cause issues.

[magic island]

@wheat atlas

[wheat atlas]

Stripe server sends a payload to the Stripe CLI on your terminal. So yes Stripe server attampt to establish a connection to your machine

[magic island]

By opening I don't mean initiating the process (which is obviously started by the server), I mean "physically" opening the TCP tunnel. Since there is no forwarding from our firewall/router to my local machine, if the server attempts to open a TCP tunnel it is most likely the root cause of my issue.

[wheat atlas]

Well yes I think it will open a TCP connection. Not sure if that is the "tunnel" you mentioned. Mostly that could be the issue when your firewall doesn't allow that

You can test on a server then, just skipping the testing in local step if that introduces more challenging network issues

[magic island]

Well usually for similar softwares it's the client that "listens" from a server by opening a TCP tunnel, and it regularly "pulls" any new event from the server. If I understand you correctly, it seems that it's server that "pushes" new events to the client by establishing an incoming connection?

[wheat atlas]

https://github.com/stripe/stripe-cli/blob/master/pkg/rpcservice/listen.go#L38

It's a websocket connection

[magic island]

I'm trying to use webhooks with a non-local end point to see if it works.

[magic island]

With a non-local end point, I received it but I got this error:

StripeSignatureVerificationError: Webhook payload must be provided as a string or a Buffer (https://nodejs.org/api/buffer.html) instance representing the raw request body.Payload was provided as a parsed JavaScript object instead.
Signature verification is impossible without access to the original signed material.

[slate vortex]

that's seperate from stripe-cli itself then and is an issue in the implementation of your Node server

really common issue , see https://github.com/stripe/stripe-node/tree/master/examples/webhook-signing for a working example

[magic island]

Ok thanks

Can using cors() app.use(cors()) cause problems to receive requests locally?

[slate vortex]

I don't know