Stripe

Capture and debug Stripe webhooks with Hookdrop

Setup

1. Open the Webhooks page

   Go to the Stripe Dashboard and navigate to Developers → Webhooks.

2. Add an endpoint

   Click Add endpoint.

3. Paste your Hookdrop URL

   Enter your Hookdrop capture URL as the endpoint:

   https://hookdrop.dev/in/{your-token}
   
4. Select events

   Choose the events you want to capture. Start with payment_intent.succeeded and payment_intent.payment_failed to cover the most common payment outcomes.

5. Save

   Click Add endpoint. Stripe will begin sending matching events to Hookdrop immediately.

Common events

Event	When it fires
payment_intent.succeeded	Payment completed successfully
payment_intent.payment_failed	Payment attempt failed
customer.subscription.created	New subscription started
customer.subscription.deleted	Subscription cancelled
invoice.paid	Invoice payment succeeded

Verifying signatures

Stripe signs every webhook request with a Stripe-Signature header. Verify it in your handler before processing the event:

import crypto from 'crypto'

const verifyStripeWebhook = (payload: string, signature: string, secret: string) => {
  const elements = signature.split(',')
  const timestamp = elements.find(e => e.startsWith('t='))?.split('=')[1]
  const sig = elements.find(e => e.startsWith('v1='))?.split('=')[1]

  const signedPayload = `${timestamp}.${payload}`
  const expected = crypto.createHmac('sha256', secret).update(signedPayload).digest('hex')

  return expected === sig
}

Your webhook secret is available in the Stripe Dashboard under the endpoint’s details.

Stripe fires test events from the dashboard that you can use to verify your capture is working. Look for events with livemode: false in the Hookdrop payload inspector.

Local development

Use your Hookdrop capture URL instead of ngrok during local development. Events appear in the Hookdrop dashboard instantly — no terminal session required, and your URL stays stable across restarts.