Skip to main content
ArcBlock Community

Payment Kit – Stripe Webhooks

Twelve
Support
payment-kitbug-bountydocsfeaturequalifiedrewarded

Hey team — just a heads-up about something I ran into with Payment Kit + Stripe live mode:

Stripe kept disabling my live webhook endpoint (https://12inchapps.com/payment-kit/api/integrations/stripe/webhook) with this error:

“No signatures found matching the expected signature for payload.”

I eventually fixed it by manually adding my live webhook signing secret to the Payment Kit environment:

javascript
STRIPE_WEBHOOK_SECRET=whsec_XXXXXXXXXXXX

After restarting the blocklet, Stripe immediately reconnected and all webhook events started verifying correctly.

Suggestion: It might help to either:

  • Add a visible field for the webhook signing secret in the Payment Kit configuration panel, or
  • Update the docs to mention that users need to add STRIPE_WEBHOOK_SECRET manually when using Stripe in live mode.

Everything works perfectly now — just wanted to share so others don’t get tripped up by the same thing.

Thanks! — 12 Inch Apps https://12inchapps.com

1 reply

Twelve11 months ago(edited)

z1bAK3mpzKC3Au3FjLtChyC47DWGtttHm6c z1VV21NqNWkiadznN32ALkos5dQqQwnCMty Does this qualify for a bug bounty?

Im asking because I see that the bug tag was removed but I was seemingly not able to use my stripe account until I manually changed the environment setting.

👀1
Reply