Skip to content

fix(stripe): use Stripe webhook signatures#100

Open
EfeDurmaz16 wants to merge 1 commit into
vercel-labs:mainfrom
EfeDurmaz16:efe/stripe-webhook-signature
Open

fix(stripe): use Stripe webhook signatures#100
EfeDurmaz16 wants to merge 1 commit into
vercel-labs:mainfrom
EfeDurmaz16:efe/stripe-webhook-signature

Conversation

@EfeDurmaz16
Copy link
Copy Markdown

Summary

Fixes Stripe webhook signing for configured Stripe webhooks.

Stripe seeded webhooks now send a Stripe-compatible Stripe-Signature header (t=<timestamp>,v1=<hmac>) instead of the GitHub-style X-Hub-Signature-256 header. GitHub-style webhook subscriptions remain the default behavior for existing GitHub webhook flows.

Details

  • Adds an optional webhook signatureScheme to the shared dispatcher.
  • Keeps the default scheme as GitHub-compatible headers.
  • Registers Stripe config webhooks with the Stripe signature scheme.
  • Adds regression coverage for both the shared dispatcher and Stripe seeding path.

Validation

  • pnpm install --frozen-lockfile
  • pnpm --filter @emulators/core build
  • pnpm --filter @emulators/core test
  • pnpm --filter @emulators/stripe test
  • pnpm --filter @emulators/core type-check
  • pnpm --filter @emulators/stripe type-check
  • pnpm --filter @emulators/core lint
  • pnpm --filter @emulators/stripe lint

Lint currently reports pre-existing warnings in untouched files:

  • packages/@emulators/core/src/fonts.ts
  • packages/@emulators/stripe/src/helpers.ts
  • packages/@emulators/stripe/src/routes/checkout-sessions.ts

Closes #97.
Closes #98.

@vercel
Copy link
Copy Markdown
Contributor

vercel Bot commented May 14, 2026

@EfeDurmaz16 is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant