I created one laravel app and set GDPR mendetory webhook. will these mandatory webhooks use the same

Shopify Apps

Topic summary

Main issue: Whether Shopify’s GDPR mandatory webhooks use the same HMAC (hash-based message authentication code) verification as other webhooks.

Context: A developer built a Laravel app and enabled the required GDPR webhooks, seeking clarity on their signature/authentication mechanism.

Key terms:

  • GDPR: EU data protection regulation requiring specific data handling and deletion webhooks for Shopify apps.
  • HMAC: A cryptographic method Shopify uses to sign webhooks so apps can verify authenticity.

Developments/outcomes: No answers or confirmations provided in the thread.

Status: Unresolved; the question remains open with no consensus or official reference cited.

Summarized with AI on February 23. AI used: gpt-5.
1

I created one Laravel app and set GDPR mandatory webbook. will these mandatory webhooks use the same HMAC encryption as the other webbooks?