medium10 pts · first answer countswebhooksnodejsapi-security

Webhook signature always fails

Stripe webhook verification fails for every event, even though the signing secret is correct. The app registers app.use(express.json()) before all routes. What is the cause?

A.Stripe webhooks must be received over plain HTTP, because TLS changes the signed payloadB.The signature covers the raw bytes, which parsing and re-serializing changeC.Webhook secrets expire every hourD.Express cannot read headers on POST requests

Discussion 0

Join free to post in the discussion.

Webhook signature always fails

Discussion 0

Related questions