webhooks

Verify a Webhook Before Letting It Change an Order

A webhook’s JSON can look correct and still be untrusted. Keep the original body, verify the signature and test failure before processing the event.