Overview
ZeroShop uses Stripe webhooks to notify your application about payment events in real time. Webhook events are delivered as HTTP POST requests to your configured endpoints with a JSON payload signed by Stripe.
Webhook Endpoints
ZeroShop exposes four webhook endpoints for different Stripe environments:
POST /api/stripe/webhook/account/live— live account eventsPOST /api/stripe/webhook/account/sandbox— sandbox account eventsPOST /api/stripe/webhook/connect/live— Stripe Connect live eventsPOST /api/stripe/webhook/connect/sandbox— Stripe Connect sandbox events
Configure these URLs in your Stripe Dashboard under Developers → Webhooks. ZeroShop automatically verifies the Stripe signature on every webhook delivery.
Signature Verification
Every webhook request from Stripe includes a Stripe-Signature header. ZeroShop
verifies this signature against your webhook signing secret before processing the event. If
the signature is invalid, the request is rejected with a 400 status.
You don't need to implement signature verification yourself — ZeroShop handles this automatically. Just make sure your Stripe webhook signing secret is configured in your shop's integration settings.