[Plugin Request] Stripe webhook verification

[nico.dicagno]

Check out this topic for methods to authenticate Stripe webhooks

Securing Stripe webhooks without authentication

EDIT: @NigelG has commented with a feature that Bubble removed from the docs but still works. Simply append ?api_token=yourAPIToken to all of your Stripe webhook URLs. The API token is generated in the API section of the editor. Appending api_token= with a valid API token will authenticate any workflow API request as an Admin. As @dorilama points out, this is likely stored in plain text in Stripe which means if Stripe gets compromised your admin key is too. [image] Based on everything contrib…

You don’t need a plugin to securely authenticate webhooks.