Stripe Webhooks

When to Use This Skill

• Setting up Stripe webhook handlers
• Debugging signature verification failures
• Understanding Stripe event types and payloads
• Handling payment, subscription, or invoice events

Verification (core)

Stripe ships official SDK helpers that verify the Stripe-Signature header (HMAC-SHA256 over timestamp.body) and parse the event in one call. Pass the raw request body — don't JSON.parse first.

Node:

const stripe = require('stripe')(process.env.STRIPE_SECRET_KEY);