Stripe webhook authentication - Ruby -
Near uses bar to pay my Ruby on-Rails application card holder through which the provision of Vebhoks It contacts me back on my application and gives information about every transaction - successful or failed
For this, my controller has something like this:
class stripe Controller & lt; ApplicationController def webhook data_json = JSON.parse request.body.read p data_json [ 'data'] [ 'object'] [customers'] and My question is how do I validate Can the authenticity of this webhook? To understand my knowledge and understand it can easily mimic this (human-in-the-middle attack).
bar:
If security is a concern, or if It is important to confirm that Stripe has sent Webhock, you should only use the ID sent in your webhole and request the remaining details directly from the Strip API.
Comments
Post a Comment