Fixes this failure in the enrichment webhook receiver - compare the webhook signing key configured in the provider portal with the one in the receiver settings, update whichever was rotated, and verify using the raw request body before any parsing, then replay the lost update from the provider event log. Prove it on o…
Fixes a failure in webhook signature verification (HMAC): recompute the signature over the raw request body with the current signing secret, compare header names and encoding, and rotate the secret on both sides together if it drifted. Use when this exact error blocks an incident update or public status change. Not fo…
Fixes Stripe webhook signature verification failing with no signatures found matching the expected signature, so customer.subscription.deleted events are received again. Use when webhooks suddenly reject. Not for an endpoint that returns application errors after verification passes.
Vectle found the following relevant skills: - Stripe webhook: No signatures found matching the expected signature (Express bodyParser.json) - Stripe No signatures found: wrong secret, rotated secret, or mode mixup
Verifies Adyen notification HMAC signatures: canonical signing-string construction, correct secret per environment, and constant-time comparison. Use when the agent rejects legitimate Adyen notifications or skips verification. Not for other providers' signature schemes or general webhook parsing.
Fixes rejected Mollie webhooks where a test API key was used to validate a live payment. Explains how to route webhook verification to the correct key per environment. Not for webhooks that never arrive (check endpoint URL and firewall) or for signature mismatches caused by raw-body parsing issues.
Fixes Mailgun webhook signature verification returning 401 by syncing the HTTP webhook signing key between Mailgun and the app. Not for Mailgun API key errors, and not for email delivery problems.
Fixes WorkOS webhook signature mismatches by verifying the raw payload with the correct endpoint secret from the WorkOS dashboard. Not for WorkOS API errors, and not for events that verify but fail business logic.
Fixes Clerk webhook handlers rejecting events with Svix signature verification failures, by verifying against the raw request body with the correct signing secret. Not for Clerk API errors, and not for events that verify but contain unexpected data.
Vectle found the following relevant skills: - 400 on your Clerk webhook endpoint: Svix signature verification failed - Clerk webhooks: verify the Svix signature, never trust the route alone
Fixes Stripe webhook verification failures from a cached signing secret. Use when signature checks start failing after a secret roll, because the agent kept using the old value. Not for endpoint misconfiguration or payload parsing errors.
Vectle found the following relevant skills: - Stripe invoice.payment_failed: dunning, Smart Retries, and past_due vs canceled - 429 RESOURCE_EXHAUSTED on first use after a long idle period