Stripe Webhook Error: Unable to extract timestamp and signatures from header

Wappler General Need Help
1

Hi all,

Migrating some of my API’s to Wappler Webhooks for Stripe.

I get this error in response to using the checkout.session.complete webhook.

Webhook Error: Unable to extract timestamp and signatures from header

For those that have successfully setup Stripe using the Wappler integration, have you come across this - and if so, is this a known bug/is there a workaround for it?

Thanks!

2

Bump - hoping to go to prod tomorrow, and this is one of the final pieces missing. I can return to the API’s I created myself if this is a known issue, but if anyone has any ideas what’s happening here so I can investigate I’d appreciate it.

4

Which server model do you use (Node/PHP)? We use the original sdk from stripe and their validation for the webhooks, the error means that it could not verify the post from stripe since the header needed for validation was missing or incorrect.

5

Hi @patrick thank you for your reply.

It’s a node project. I’m on the latest Wappler, and just started moving some of the API’s I built into the Wappler Stripe Webhooks.

Is there something I can check on my end?

6

When and where do you get the error, how do you test the webhook?

7

I’m testing the checkout.session.completed webhook.

I’m doing so by successfully purchasing a subscription (verified as completed) and then the webhook Stripe send to our server (the webhook) fails.

I’m testing this with Postman, I’m testing by cloning the Stripe Webhook request into Postman and then running that agains the apps webhook endpoint.

This is what I have done for all of the APIs without any issues, so I’m not sure if this is expected to not work with the new webhooks setup, or if I need to look into this further?

8

The stripe post contains a signature with a timestamp in one of its headers, this is used to validate if the request really comes from stripe and is not someone trying to simulate stripe. So the postman request will not work since it will be seen as not a valid request, you can use the stripe test environment and optionally the stripe cli for testing the webhook.

1 Like
9

Got it - so while this approach worked fine for the APIs I built it won’t due to the approach the webhooks take?

Thanks Patrick - I’ll use Stripe for now then instead of Postman.