App rejected with "Your app hasn't subscribed to mandatory GDPR webhooks."

[pierpi]

I configured the mandatory webhooks in the app setup:

1. https://<app_url>/webhooks/customers/data_request

2. https://<app_url>/webhooks/customers/redact

3. https://<app_url>/webhooks/shop/redact

I submitted the app for approval, but I get a rejection with only this description included: "Your app hasn't subscribed to mandatory GDPR webhooks." I was able to verify the data_request one was correctly invoked (by requesting to view data for a given customer).

Anyone can shed some light?

Thank you!

[efueled]

I'm having the same exact issue, did you figure out a solution?

[pierpi]

@efueled, @seanberto  see my update above. hope it helps you too. Cheers!

[seanberto]

Subscribing to this thread.

[pierpi]

The submission process, and specifically the rejection reason(s), is quite a blackbox. However, my webhooks implementation was returning a 400 upon hmac validation failure. I changed it to return 401 and it seemed to do the trick. My app passed the webhooks acceptance criteria. Would be nice if the rejection would contain more information about the reason why it failed.