Webhook signature fails only when the payload has a slash in it

Webhook signature check passed in staging for weeks, then started rejecting about 4% of production events. No pattern in event type, amount, or time of day. The handler used express.json() to parse the body, then verified the HMAC against JSON.stringify(req.body). Parse, re-serialize, compare. It looks harmless, and it matches the signature... Weiterlesen: Webhook signature fails only when the payload has a slash in it