Checks · PAY-001

PAY-001 · Stripe webhook without signature verification

Why it matters

Anyone who can reach the webhook URL can tell your app that a payment succeeded.

How we detect it

The webhook handler never verifies the Stripe signature.

How we fix it

Verify the signature against the raw body and the webhook secret.

Can it be fixed automatically? Yes, with a template change

Related checks

• PAY-002 · Price or amount taken from client
• PAY-003 · Paid access granted on redirect not webhook
• PAY-004 · Webhook handler not idempotent
• PAY-005 · Stripe live secret in frontend