vdrn
Forum Replies Created
-
Forum: Plugins
In reply to: [WooCommerce Stripe Payment Gateway] Are Webhooks neccesary?@ckadenge Thank you. I guess my only option is to modify the plugin.
Forum: Plugins
In reply to: [WooCommerce Stripe Payment Gateway] Are Webhooks neccesary?I was hoping that secret is not strictly required when using webhooks. (I’m using multiple stripe accounts for my shop, and while publishable and secret keys can be changed by filter hooks easily, there is no such functionality for webhook secret).
More details on useragent checking to verify webhooks:
This code callsvalidate_request_user_agentwhen there is no wehbook secret: https://github.com/woocommerce/woocommerce-gateway-stripe/blob/44584a226cdd0008d78513eeb0140b889ccc556c/includes/class-wc-stripe-webhook-handler.php#L108
I’m quoting the comment to the function called there:Verify User Agent of the incoming webhook notification. Used as fallback for the cases when webhook secret is missing.(link to the comment: https://github.com/woocommerce/woocommerce-gateway-stripe/blob/44584a226cdd0008d78513eeb0140b889ccc556c/includes/class-wc-stripe-webhook-handler.php#L136)
Forum: Plugins
In reply to: [WooCommerce Stripe Payment Gateway] Are Webhooks neccesary?Thanks so much @doublezed2 for a quick response.
I have a follow-up question: In order for webhooks to work properly, is adding a webhook secret in woocommerce-gateway-stripe settings strictly necessary?
(I beleive woocommerce-gateway-stripe can alternately use useragent checking to verify webhooks, which makes secret key optional)