Verify webhook payload

nbreaux — Tue, 27 Oct 2020 19:38:34 GMT

I have a webhooks endpoint setup in a node project build using Hapi.js. I am using the crypto module to generate the hash to verify the payload. Everything seems to work fine when I do a test webhook, the hash I generate matches the hash in the headers. However, when I turn on the webhook and subscribe to the 'net.authorize.payment.authorization.created' event the hashes don't seem to match. I don't know what I could be doing wrong because the test event works fine, the only difference I can thing of is that the test event is an authCapture instead of an authorization.created. I don't know why that would make a difference, but here is my code.

const isValidPayload = (request) => {
  const header = _.get('headers.x-anet-signature', request);
  const payload = JSON.stringify(request.payload);
  const hash = crypto.createHmac('sha512', config.get('authorizenet:signature_key'))
    .update(payload)
    .digest('hex');

  return header === `sha512=${hash.toUpperCase()}`;
};

I've been banging my head against a wall with this problem for the last week. If anyone has some insight please let me know. Thanks.

edit: I should probably mention this is in a sandbox environment as well

Re: Verify webhook payload

three60sb — Thu, 18 Aug 2022 17:52:36 GMT

Hello, did you ever resolve this issue? I am unfortunately at a loss for days with the same problem

Re: Verify webhook payload

DivyaArun — Thu, 24 Nov 2022 13:00:51 GMT

Please response if you ever resolved the above problem

topic Verify webhook payload in Integration and Testing

Verify webhook payload

Re: Verify webhook payload

Re: Verify webhook payload