#jackey_unexpected

1 messages ¡ Page 1 of 1 (latest)

somber shadowBOT
#

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1481226454326050988

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.

weary pasture
#

I need to inquire whether a unified public key is used for the webhook event callback.

small widget
#

Sorry, I don't know what your question means. What is a 'unified public key'?

weary pasture
#

When a certain user triggers a webhook event and requests our interface, we need to use the public key for signature verification on our end.

small widget
#

You can't use the pk_xxx key, no. You'd use a combination of the secret key (to init the Stripe SDK) and the webhook's secret (whsec_xxx)

https://docs.stripe.com/webhooks#verify-webhook-signatures-with-official-libraries

Create an event destination to receive events at an HTTPS webhook endpoint. Receiving webhook events allows you to listen to asynchronous events, such as when a customer's bank confirms a payment, a customer disputes a charge, a recurring payment succeeds, or you collect a subscription payment.

weary pasture
#

This is the private key. I need the public key. Just use the public key to verify the signatures of requests sent by different users.

small widget
#

Sorry I don't know what you mean by a 'public key' in the context of webhooks. There's only one secret and it's unique per webhook