Billing

Stripe's webhook endpoint (not for customers)

Stripe calls this; you do not. It is the only unauthenticated write path in the API, and the Stripe-Signature header is what stands in for authentication: the raw body is verified against the endpoint's signing secret before a byte of it is parsed.

Handled: checkout.session.completed, customer.subscription.created, .updated, .deleted, invoice.paid, invoice.payment_failed. Idempotent on the Stripe event id, so a redelivery is a no-op. Anything verified answers 200, including an event we do not act on.

post/v1/stripe/webhook

Request

  • Base URL: https://api.galleyrender.com
  • URL: https://api.galleyrender.com/v1/stripe/webhook
  • Auth: none required

Headers

Stripe-Signaturestring required

t=<unix seconds>,v1=<hex hmac-sha256 of t.body>.

Request body

object required

A Stripe Event.

Response

Verified. outcome is applied, ignored, unmatched or duplicate.

receivedtrue required
idstring required
typestring required
outcome'applied' | 'ignored' | 'unmatched' | 'duplicate' required
accountstring
planstring
reasonstring

Example response

{
  "id": "evt_1UGP…",
  "type": "customer.subscription.created"
}

Changes

No recorded changes to this operation across all 1 revision of this API.