No signatures found matching the expected signature for payload

[richardun]

Hi!

Thanks for creating this great gem. When payment is successful at Stripe and it returns to my (localhost) site, it doesn't create an entry in pay_charges. The Pay::Webhooks::StripeController appears to look for 'Stripe-Signature', although that isn't in the event object returned by Stripe.

Started POST "/pay/webhooks/stripe" for ::1 at 2021-12-12 16:20:45 -0600
Processing by Pay::Webhooks::StripeController#create as XML
  Parameters: {"id"=>"evt_1K60PRDohLEfb2vS3djzu8M9", "object"=>"event", "api_version"=>"2020-08-27", "created"=>1639347644, "data"=>{"object"=>{"id"=>"cs_test_a1InDnRZJT8nhtYWYqLAmuj4k5zM5YgmlmuUZvFYcMiv5igzrccviB4tAH", "object"=>"checkout.session", "after_expiration"=>nil, "allow_promotion_codes"=>nil, "amount_subtotal"=>40000, "amount_total"=>40000, "automatic_tax"=>{"enabled"=>false, "status"=>nil}, "billing_address_collection"=>nil, "cancel_url"=>"http://localhost:3000/checkout/9e8b9e8f-5e82-4118-837c-0d35a4eb9b5e/show?session_id={CHECKOUT_SESSION_ID}", "client_reference_id"=>nil, "consent"=>nil, "consent_collection"=>nil, "currency"=>"usd", "customer"=>"cus_KlSpHSIu5x28G0", "customer_details"=>{"email"=>"bob@lawblah.com", "phone"=>nil, "tax_exempt"=>"none", "tax_ids"=>[]}, "customer_email"=>nil, "expires_at"=>1639434017, "livemode"=>false, "locale"=>nil, "metadata"=>{}, "mode"=>"payment", "payment_intent"=>"pi_3K60OzDohLEfb2vS3Nh6I9sr", "payment_method_options"=>{}, "payment_method_types"=>["card"], "payment_status"=>"paid", "phone_number_collection"=>{"enabled"=>false}, "recovered_from"=>nil, "setup_intent"=>nil, "shipping"=>nil, "shipping_address_collection"=>nil, "shipping_options"=>[], "shipping_rate"=>nil, "status"=>"complete", "submit_type"=>nil, "subscription"=>nil, "success_url"=>"http://localhost:3000/checkout/9e8b9e8f-5e82-4118-837c-0d35a4eb9b5e/success?session_id={CHECKOUT_SESSION_ID}", "total_details"=>{"amount_discount"=>0, "amount_shipping"=>0, "amount_tax"=>0}, "url"=>nil}}, "livemode"=>false, "pending_webhooks"=>2, "request"=>{"id"=>nil, "idempotency_key"=>"[FILTERED]"}, "type"=>"checkout.session.completed", "stripe"=>{"id"=>"evt_1K60PRDohLEfb2vS3djzu8M9", "object"=>"event", "api_version"=>"2020-08-27", "created"=>1639347644, "data"=>{"object"=>{"id"=>"cs_test_a1InDnRZJT8nhtYWYqLAmuj4k5zM5YgmlmuUZvFYcMiv5igzrccviB4tAH", "object"=>"checkout.session", "after_expiration"=>nil, "allow_promotion_codes"=>nil, "amount_subtotal"=>40000, "amount_total"=>40000, "automatic_tax"=>{"enabled"=>false, "status"=>nil}, "billing_address_collection"=>nil, "cancel_url"=>"http://localhost:3000/checkout/9e8b9e8f-5e82-4118-837c-0d35a4eb9b5e/show?session_id={CHECKOUT_SESSION_ID}", "client_reference_id"=>nil, "consent"=>nil, "consent_collection"=>nil, "currency"=>"usd", "customer"=>"cus_KlSpHSIu5x28G0", "customer_details"=>{"email"=>"bob@lawblah.com", "phone"=>nil, "tax_exempt"=>"none", "tax_ids"=>[]}, "customer_email"=>nil, "expires_at"=>1639434017, "livemode"=>false, "locale"=>nil, "metadata"=>{}, "mode"=>"payment", "payment_intent"=>"pi_3K60OzDohLEfb2vS3Nh6I9sr", "payment_method_options"=>{}, "payment_method_types"=>["card"], "payment_status"=>"paid", "phone_number_collection"=>{"enabled"=>false}, "recovered_from"=>nil, "setup_intent"=>nil, "shipping"=>nil, "shipping_address_collection"=>nil, "shipping_options"=>[], "shipping_rate"=>nil, "status"=>"complete", "submit_type"=>nil, "subscription"=>nil, "success_url"=>"http://localhost:3000/checkout/9e8b9e8f-5e82-4118-837c-0d35a4eb9b5e/success?session_id={CHECKOUT_SESSION_ID}", "total_details"=>{"amount_discount"=>0, "amount_shipping"=>0, "amount_tax"=>0}, "url"=>nil}}, "livemode"=>false, "pending_webhooks"=>2, "request"=>{"id"=>nil, "idempotency_key"=>"[FILTERED]"}, "type"=>"checkout.session.completed"}}
No signatures found matching the expected signature for payload

Installed:

gem 'pay', '~> 3.0'
gem 'stripe', '>= 2.8', '< 6.0'
gem 'paddle_pay', '~> 0.1'
gem 'receipts', '~> 1.1'

[excid3]

Interesting. I wonder why it is XML? It should be JSON I'm pretty sure from the Stripe CLI.

[richardun]

Thanks for the quick reply. Yeah, that struck me too. It looks like I'm getting JSON... not sure why this module is assuming it's XML. Perhaps there's a way to change that in routes.

[excid3]

Are you using the Stripe CLI for forwarding the webhooks?

[richardun]

I see what the problem was... each time I created the stripe listen session in my terminal, it created a new signing secret (of course)... I needed to update my rails credentials secret and restart rails. I wasn't doing that.. using the original one I had. I have pay_charges now! Thanks for your help!

[excid3]

That would do it! Glad you got it working. 👍