aquaspirit-webhook

[drowsy wigeon]

👋 Happy to help

[drowsy wigeon]

Are you listening to the forwarded event on local (http://localhost...) or directly with ngrok (https://xxxx.ngrok.io/) ?

[brisk basin]

directly with ngrok subdomain

[drowsy wigeon]

This error is commonly due to two reasons:

1. Wrong Webhook secret
2. Request is not in raw form

While I'm checking Item (2), can you double check if the Webhook secret is correct? It should be under "Hosted endpoints" in https://dashboard.stripe.com/test/webhooks

[brisk basin]

aight i'll double check

[drowsy wigeon]

Can you remove const payload = requestBuffer.toString(); [0] and use requestBuffer directly in stripe.webhooks.constructEvent(..)?

[0] https://github.com/aquaductape/test-nexjs-stripe/blob/main/pages/api/stripe/webhook/index.ts#L28

[brisk basin]

oh kk, so in stripe webhook dashboard I needed to add payment intent events, before it only had charge events, and now it works? strange

[drowsy wigeon]

The error shouldn't be dependent on the event sequences

[brisk basin]

i forgot to mention, i wasn't using Test version of webhook, i was using production

so i switched to Test version and grabbed correct secret of webhook

[drowsy wigeon]

Ah, it seems like the secret key is the issue

[brisk basin]

yeah it was the secret key issue, i swear i changed it to Test version a while ago and it showed the same error

aight last question, so am I using the most up to date and secure implimentation of reading stripe request in webhook file?? https://github.com/aquaductape/test-nexjs-stripe/blob/main/pages/api/stripe/webhook/index.ts

[drowsy wigeon]

Yes, this looks correct. stripe.webhooks.constructEvent(..) [0] will do signature verification and ensure that the event is indeed sent from Stripe.

[0] https://stripe.com/docs/webhooks/signatures

[brisk basin]

Awesome, so my issue is solved! Thank you so much

[drowsy wigeon]

No problem! Happy to help 🙂