Tebex Webhooks

When to Use This Skill

• Setting up Tebex webhook handlers
• Debugging Tebex X-Signature verification failures
• Completing the validation.webhook handshake so an endpoint activates
• Handling payment, dispute, and recurring-payment events

Verification (core)

Tebex has no SDK. Verify the hex X-Signature header manually. The signature is two-step: SHA-256 hash the raw request body, then HMAC-SHA256 that hex hash using your webhook secret as the key. Do not JSON.parse before verifying — a re-serialized body produces a different hash.

Node: