communication auth_error ai_generated true

Webhook signature verification failed

ID: communication/webhook-signature-invalid

Also available as: JSON · Markdown
82%Fix Rate
86%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active

Root Cause

Webhook signature doesnt match expected HMAC.

generic

Workarounds

  1. 90% success Verify signing secret matches provider configuration
  2. 92% success Use raw request body (not parsed JSON) for HMAC computation

Dead Ends

Common approaches that don't work:

  1. Disable signature verification 90% fail

    Accept forged webhooks

  2. Accept all webhooks and filter later 78% fail

    Processing invalid payloads