Woocommerce Webhook Signatures Don't match

[Andriy-Kulak]

I have been attempting to make my woocommerce webhooks more secure by verifying the signature in the request headers but I have not be been able to get signatures to match at the moment so I am looking for some guidance.

The code below is what I use to compute the signature (aka computedSignature) in Node Js and compare it to what woocommerce webhook sends (signature).

Does anyone have any ideas or suggestions?

function processWebHookSignature(secret, body, signature) {
  const signatureComputed = crypto.createHmac('SHA256', secret).update(
  new Buffer(JSON.stringify(body), 'utf8')).digest('base64');
  console.log('signatureComputed =====', signatureComputed);
  console.log('signature =====', signature);
  return (signatureComputed === signature);
}

// executing
processWebHookSignature(WEBHOOK_SECRET, req.body, req.headers['x-wc-webhook-signature']);

[claudiosanches]

This question does not sound like related to this REST API library. Better try the WooCommerce support channel: https://wordpress.org/support/plugin/woocommerce