How Can I Resolve Issues With Shopify Partner Webhook Verification?

This topic was automatically generated from Slack. You can find the original thread here.

Hi, I’m using the Shopify Partner integration to verify my webhooks but it doesn’t work. I’m not able to get the good hash and it looks like steps.trigger.event.body doesn’t return the “raw format”. Someone can help me?

Hello , could you elaborate the behavior you’re seeing? And which specific Shopify Partner source you’re using?

I’ve made a custom node.js step based one the code of the Shopify Partner -> Verify Webhook. I’ve try the webhook in webhook.site, I take the body with the copy/paste and put it in a hmac generator and the hmac was good. To get the good hashing, it seem to need the “raw body” indentation in string and the steps.trigger return an object. I use crypto to make hmac and it doesn’t accept an object. When a format with Buffer or JSON.stringify, the indentation change and the hashing result is not working.

Thank you, even though I’m not quite understanding the process, maybe the hashing process can be included in a Pipedream source?

Could you submit for us a ticket for a new source stating the process of hasing and verifying the webhook?

Maybe this answer from Pierce can help? How can I access the raw body of a request for Webhook signature-comparison purposes? - #5 by pierce