Why your x-paystack-signature check fails, why failed payments never reach your webhook, and why your amounts are 100 times too small.
Nduhukire Medard
Posted on Originally published at paydev-africa.pages.dev
Top comments (1)
the signature section is the one that saves people real money: comparing the header against a hash of the parsed body fails only sometimes, which is the worst kind of failure to debug. hashing the raw bytes before anything touches them is the whole fix. the failed-payments point is underrated too, since webhook silence and a declined card look identical if you only listen for success, and that's how pending orders rot in the database for a week.