🔒
Signature Validation
Verify webhook authenticity for Stripe, GitHub, Slack, Shopify, and custom services.
LaraWebhookSecure Webhook Handling for Laravel
Validate signatures, manage retries, log events, and integrate popular services in minutes.
Skip to content
Quick Example ​
php
// routes/web.php
Route::post('/stripe-webhook', function () {
$payload = json_decode(request()->getContent(), true);
// Handle the event
event(new StripeWebhookReceived($payload));
return response()->json(['status' => 'success']);
})->middleware('validate-webhook:stripe');What the middleware does automatically:
- ✅ Validates the webhook signature
- ✅ Logs the event to the database
- ✅ Rejects duplicate webhooks (idempotency)
- ✅ Returns 403 for invalid signatures
- ✅ Returns 400 for malformed payloads
Supported Services ​
| Service | Signature Header | Status |
|---|---|---|
| Stripe | Stripe-Signature | ✅ Built-in |
| GitHub | X-Hub-Signature-256 | ✅ Built-in |
| Slack | X-Slack-Signature | ✅ Built-in |
| Shopify | X-Shopify-Hmac-Sha256 | ✅ Built-in |
| Custom | Any | ✅ Extensible |