Stripe webhook not working? Trace delivery, signature and state
A webhook has several independent stages: Stripe sends an event, the endpoint receives the raw request, signature verification succeeds, the event is handled, and application state is persisted. Find the first stage that fails.
WHAT THIS USUALLY LOOKS LIKE
- Payment succeeds but the app never marks the order paid.
- Webhook endpoint returns 4xx or 5xx.
- Signature verification fails only in production.
- The same event changes state twice.
LIKELY FAILURE AREAS
Wrong signing secret
Test/live endpoints and different webhook endpoints can have different signing secrets.
Body parsing before verification
Signature verification typically depends on the exact request payload received.
Non-idempotent handler
Webhook delivery can be retried, so state transitions should tolerate duplicate events.
CHECK THESE FIRST
- Inspect the event delivery attempt and HTTP response in Stripe.
- Confirm the deployed endpoint and environment use the intended signing secret.
- Verify signatures against the unmodified request body as required by the integration.
- Log/store event identifiers for safe retry handling.
- Test duplicate delivery and delayed delivery behavior.
WHAT WE NEED TO INVESTIGATE IT
- GitHub repository
- Deployed endpoint URL
- Stripe event/delivery evidence; dashboard access only if needed
Do not paste passwords, private API keys or other secrets into the public submission form. We request additional access only after scope review when it is actually required.
COMMON QUESTIONS
Should payment success rely on the browser redirect?+
For server-side fulfillment/state, the webhook is generally the reliable source because the customer may not complete a return-page flow.
Can VibeHell repair webhook code?+
Yes when the issue is in the application. Provider configuration may also need to be inspected when the code is correct.
RELATED FIX GUIDES
STOP DEBUGGING
THE PROMPT LOOP.
VibeHell investigates the actual application, confirms scope and price, then implements and verifies the repair.