#dan1106_docs
patent lavaBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! We typically respond in a few minutes, but in some cases we might need a bit more time (e.g., server's busy, you've got a complex question, etc.).
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1255247122404605973
📝 Have more to share? Add details, code, screenshots, videos, etc. below.
autumn star
Hello
- When the app is installed, will there be a new webhook endpoint per account that installs it?
- How do I programatically get the webhook signing secret after the endpoint is created?
No that's not how it works.
When the accounts install your app, they basically connect to your account as a Platform. You'd need to register a connect type webhook endpoint on your Platform account and use the webhook secret from that endpoint to perform signature verification and construct events
uneven grail
hi Hanzo, thanks for the answer -- so I should follow this guide: https://docs.stripe.com/connect/webhooks?
is that right?
in this case is my platform account the account that I'm signed in to as I develop the app?
autumn star
Correct
uneven grail
ok, thanks this is very helpful!
how is the app associated with the platform account -- is it through the upload process?
autumn star
Yup, when you upload and submit the app - it gets associated to your account
uneven grail
and if I'm following correctly, I only need to create my connect webhook endpoint one time. Do I then need to subscribe to specific events (i.e. associate events with my connect webhook endpoint), or will I just receive all events that I have requested permission for in my stripe-app.json manifest?
autumn star
Do I then need to subscribe to specific events (i.e. associate events with my connect webhook endpoint), or will I just receive all events that I have requested permission for in my stripe-app.json manifest?
I believe it's the latter. You'd only receive events that you have permissions for.
uneven grail
ok thanks, this is super helpful -- hopefully it's unblocked me!
fyi the reason i filed this question under docs is because i've been trying to use the Stripe Apps documentation and I've found the auth story pretty difficult to piece together. I think if the docs made reference to the fact that much of the logic for Platforms applied that would be super helpful. e.g. for retrieving secrets from the Secret API you can specify the account ID that the secret was stored under, but that's not explicitly noted anywhere.
autumn star
I'll make sure to flag this feedback internally 🙂