I have created the Public app and I have integrated all required Webhooks using the Shopify <> Amazon Event bridge:https://shopify.dev/apps/webhooks/configuration/eventbridge.
In the Define pattern section, I did choose the Event pattern and select the Pre-defined pattern by service Shopify. Screenshot:
When I submitted my public app to Shopify. I did get rejection & received the following reply from Shopify.
App must verify the authenticity of the request from Shopify.> Your app’s HTTPS webhook endpoints must validate the HMAC digest of each request, and return an HTTP 401 (Unauthorized) response when rejecting a request that has an invalid digest. Learn more about verifying a webhook
I have the following questions :
Do we need to validate the webhook request using HMAC with EventBridge? If yes how can I do that?
https://community.shopify.com/post/1226067
As mentioned in the community link: “Shopify is able to produce events into the partner event source. There is no need to validate HMAC with EventBridge.”