Re: HMAC header changed?

Why did my webhooks stop validating after upgrading to PHP 8.1?

ewd910
Shopify Partner
6 0 1

Hi all,

we've had webhooks set up on our site for a few years now without issue. However when we upgraded our services to PHP 8.1 from PHP 8 our webhooks stopped validating. Upon investigation it seems that we're now getting the

X-Shopify-Hmac-SHA256

header rather than the 

HTTP_X_SHOPIFY_HMAC_SHA256

However according to this doc - https://shopify.dev/docs/apps/webhooks/configuration/https#step-5-verify-the-webhook we should still be getting the uppercase / underscore version. Is this an intentional change or a known issue?

Reply 1 (1)

ewd910
Shopify Partner
6 0 1

Sorry, realized this should go in the Webhooks and Events board but I'm not sure how to move it or delete it