#Jaxon!-webhook-signature

1 messages · Page 1 of 1 (latest)

void zodiac
#

Hi 👋 the stripe-signature header will not contain your signing secret because that is a secret resource that should not be transmitted like that. Instead that header includes a timestamp and a hash value as explained here:
https://stripe.com/docs/webhooks/signatures#verify-manually
These values allow you to manually confirm the event was sent by Stripe and recently.

Check the webhook signatures

Verify the events that Stripe sends to your webhook endpoints.

signal tangle
#

Are their any code snippets I could use?

void zodiac
#

For, manually verifying the webhook signature? All of our official libraries have built in support for easily verifying webhook signatures if you'd rather not do it yourself, and those snippets can be found two sections above the one that I linked you to initially.

signal tangle
#

Ahh yes I see it. Thank you for your time.

#

🙂

void zodiac
#

Any time!