Fix a webhook signature mismatch
A signature mismatch means Hookmetry received the request but the configured validator could not verify it with the endpoint configuration.
Diagnosis procedure
- Open the webhook log and confirm its validation type and error code.
- Confirm the required signature header is present.
- Confirm the endpoint secret matches the sender configuration and environment.
- Compare the raw request body and signing contract with the provider delivery record.
- For Stripe, check timestamp expiry before investigating the digest.
- Send a new test event after correcting the sender or endpoint configuration.
Replay is not a fresh provider delivery
Replay preserves stored signatures and does not obtain a new provider timestamp or signature. It cannot prove that an application-side provider signature check will accept the replayed request.