indiekola_webhooks

[wind isle]

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1342274933937405993

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

[ruby gorge]

Hello! You described what you're trying to do, but you didn't ask a question. How can I help you?

[plush garden]

Hello

I get an error when trying to pay and get credits on my site

[Stripe Webhook] Signature verification failed: {
error: "No signatures found matching the expected signature for payload. Are you passing the raw request body you received from Stripe? \n" +
"\n" +
"Learn more about webhook signing and explore webhook integration examples for various frameworks at https://github.com/stripe/stripe-node#webhook-signing\n",
type: "w",
bodyLength: 3348,
signature: "t=1740092665,v1=616100c6abc169354b9c3eb84069be6da646638456ed089708e20b63facee0a6"
}

[ruby gorge]

That error indicates you're either using the wrong webhook secret or that you're not passing the raw, unaltered, unparsed body.

[plush garden]

I checked everything, but nothing changed.

[ruby gorge]

Looks like you're using Node. Getting the raw body in Node can be tricky, and there's no one-size-fits-all solution. There are many possible fixes in this thread: https://github.com/stripe/stripe-node/issues/341

Generally, try to grab the raw body first thing, before any other middleware runs if possible.

[plush garden]

thank you, I'll study it now

please tell me how to find out what version of api comes from stripe

[ruby gorge]

You mean what API version the Events you're receving are rendered in? If so, Events have an api_version property that tells you that: https://docs.stripe.com/api/events/object#event_object-api_version

[plush garden]

nothing helps. In the end I got to the pure error [Stripe Webhook] Signature verification failed

[ruby gorge]

You're 100% certain that you're using the correct webhook secret in your code?

[plush garden]

I double-checked, everything was entered correctly

[ruby gorge]

And you're 100% certain that the code you're seeing is the same core running on the server where the Events are being sent?

Like there's no possibily of a deployment or upload failure?

[ruby gorge]

And you're 100% certain you're passing the raw, unaltered body of the incoming request to the function that generates the Event object? Even changes in whitespace will invalidate the signature.

[plush garden]

in the end nothing helped, I got completely confused