A7U-signature-verification | Stripe Developers | Page 1

sand wolf Nov 18, 2021, 6:44 PM

#

Are you using any middleware that could be modifying the raw body of the request?

ocean glade Nov 18, 2021, 6:45 PM

#

Hm I don't think so, let me recheck

#

Nope, I'm using NextJS but I don't think it does anything to the raw body in the background. Does the body come beautified already from stripe or no?

#

here's how I'm getting the body and signature

#

bottom is sig

#

wait

// Use body-parser to retrieve the raw body as a buffer
const bodyParser = require('body-parser');``` as a buffer, that might be it 🤔

sand wolf Nov 18, 2021, 6:50 PM

#

ah that's definitely it

#

This is a super common problem that others using node have hit - I'd suggest reading through some of the suggestions here (https://github.com/stripe/stripe-node/issues/341) and the suggestion here (https://github.com/stripe/stripe-node/issues/1294) may also be helpful since that one specifically mentions nextjs

ocean glade Nov 18, 2021, 6:53 PM

#

will check it out thanks, and I've just noticed something. Verifying signature shouldn't be written in my webhook code 🤔

sand wolf Nov 18, 2021, 6:53 PM

#

What do you mean?

ocean glade Nov 18, 2021, 6:54 PM

#

app.post('/webhook', bodyParser.raw({type: 'application/json'}), (request, response) => {```
it's sending a post request to `/webhook`

#

or am I reading this in a wrong way

sand wolf Nov 18, 2021, 6:58 PM

#

Signature verification is happening when you call stripe.webhooks.constructEvent(req.body, sig, endpointSecret); - which I assume it being called when you hit /webhook

ocean glade Nov 18, 2021, 6:59 PM

#

I think I got it

#

yup I got it, the 2nd link that u sent me on github helped

#

thank you!

sand wolf Nov 18, 2021, 6:59 PM

#

👍 happy to help!

ocean glade Nov 18, 2021, 7:01 PM

#

so now when the request was sent from a party other than stripe, const event will give an error right?

sand wolf Nov 18, 2021, 7:02 PM

#

yup! that's the idea 🙂

#A7U-signature-verification