Hi, @MNorgren !

After a long debugging session with one very nice Stripe Discord Admin from the Stripe Dev Server the problem was actually very simple.

I did use a bodyParser like this: app.use(express.json()) and this middleware did converted the body into a JSON format before I could get the raw body.

And Stripe needs the raw body to verify the WebHook.

And so now what I have done is the following:

app.use((req, res, next) => {
  if (req.originalUrl === '/webhook') {
    next(); // Do nothing with the body because I need it in a raw state.
  } else {
    express.json()(req, res, next);  // ONLY do express.json() if the received request is NOT a WebHook from Stripe.
  }
});

Hope this helps! Greetings from Hamburg.

@Jonathan-Hofmann - Thank you, that also looks like it would work!

I also found a work-around by using the express.raw({type: 'application/json'}) as specified in the docs, but rather than using request.body, I had to use request.rawBody.

My express route ended up looking like this:

  app.post('/stripe/webhook', express.raw({type: 'application/json'}), asyncHandler(async (req: Request, res: Response, ) => {

    const stripeSignature = req.headers['stripe-signature'];
    if(stripeSignature == null) { throw new UnknownError('No stripe signature found!');  }

    const stripePayload = (req as any).rawBody || req.body;
    const stripeSecret = `whsec_*********`;
    const event = stripe.webhooks.constructEvent(stripePayload, stripeSignature?.toString(), stripeSecret);

    // Handle Event...
    const response = myService.handleEvent(event)
    res.send(response );
  }));

Hi, @MNorgren !

After a long debugging session with one very nice Stripe Discord Admin from the Stripe Dev Server the problem was actually very simple.

I did use a bodyParser like this: app.use(express.json()) and this middleware did converted the body into a JSON format before I could get the raw body.

And Stripe needs the raw body to verify the WebHook.

And so now what I have done is the following:

app.use((req, res, next) => {
  if (req.originalUrl === '/webhook') {
    next(); // Do nothing with the body because I need it in a raw state.
  } else {
    express.json()(req, res, next);  // ONLY do express.json() if the received request is NOT a WebHook from Stripe.
  }
});

Hope this helps! Greetings from Hamburg.

I love you, sincerely

HI all! I have a NestJS app and I am obtaning raw body at application level like this:

//main.ts
const app = await NestFactory.create(AppModule, { rawBody: true });

It works when I use my own credentials at test mode. But when I deploy the code to the production where I use another stripe account credentials with live mode, it throw this error when a payment is received: No signatures found matching the expected signature for payload

I couldn’t find any solution for days. Can you please help me?

Another alternative solution. Since we need to access only the raw request body we can alter the request object to have a raw body property. Since we are using json body parser we can set this in the middleware like this:

app.use(
  express.json({
    verify: (req, res, buf) => {
      req.rawBody = buf;
    },
    limit: '10kb',
  })
);

app.post('/webhook', (req,res,next)=>{
(req, res, next) => {
  const signature = req.headers['stripe-signature'];
  try {
    const event = stripe.webhooks.constructEvent(
      req.rawBody,
      signature,
      process.env.STRIPE_WEBHOOK_SECRET
    );

    if (event.type === 'checkout.session.completed') {
     // sth you want to run
    }

    res.status(200).json({ recived: true });
  } catch (err) {
    res.status(400).send(`Webhook error: ${err.message}`);
  }
}
});

Hi, @MNorgren !

After a long debugging session with one very nice Stripe Discord Admin from the Stripe Dev Server the problem was actually very simple.

I did use a bodyParser like this: app.use(express.json()) and this middleware did converted the body into a JSON format before I could get the raw body.

And Stripe needs the raw body to verify the WebHook.

And so now what I have done is the following:

app.use((req, res, next) => {
  if (req.originalUrl === '/webhook') {
    next(); // Do nothing with the body because I need it in a raw state.
  } else {
    express.json()(req, res, next);  // ONLY do express.json() if the received request is NOT a WebHook from Stripe.
  }
});

Hope this helps! Greetings from Hamburg.

u saved my life, thanks!!