Topics covering webhook creation & management, event handling, Pub/Sub, and Eventbridge, in Shopify apps.
I believe I have configured my mandatory webhooks correctly. But the automated webhook HMAC signature verification which is done when submitting an app for the store listing review keeps failing for me.
I have verified that the webhook works as expected in two ways:
1- When I install my app in a test store, and uninstall it, after around 2 days I get a call to my webhook for data removal, as expected. It is processed normally and returns a 200 as documented.
2- If I call the webhook e.g. using cURL with an invalid payload containing a wrong signature, I get a 401 as expected.
3- I can see my webserver logs for both cases.
However, I can't see any logs when running the automated Shopify verification. It simply fails after 2-4mins with no specific error or anything. So I can't troubleshoot what's happening, as it seems that Shopify is calling my webhooks with no data. How exactly is this verification being done then?