Verifying Webhook HMAC?

[ChrisBradley]

Hey,

Wondering if anyone has any guidance on how to use the webhook signature?

I have looked over the previous questions, but i think they are related to app based webhooks and not the admin webhook?

I tried verifying x-shopify-hmac-sha256 against this value, which is a false.

[KyleG-Shopify]

Hey @ChrisBradley

For admin subscribed webhooks, the validation should work the same. The difference is using the provided signature in place of the app secret.

Let me know if that works for you.