Node.js order/create Webhook request authentication hmac is not matching with public/custom app.

Retired Boards Appdev Partners Discussion
,
1

i have two different apps in which one is a development app and other is public app, but when i tried to authenticate the request coming from order/create Webhook with the given algorithm by shopify, refer to below link:
https://shopify.dev/apps/webhooks/configuration/https#step-5-verify-the-webhook

it works with development app and authenticated with no issues but when request comes from public app it doesn’t matches the hash with shopify hmac and authentication failed…

I am using below method to generate hash…

const _hash = crypto
.createHmac(‘sha256’, “shopifyApiSecret”)
.update(JSON.stringify(req.body), “utf8”)
.digest(‘base64’);

can someone please help me to highlight mistake at my end or anything else?

2

having the same problem. For some reason the has is not matching thehmacHeader. why is that? I am getting the rawBody and using the correct apiSecret for the store i am using… :confused: