Webhook HMAC Hash Doesn't Match

Devs Needed & Available
1

We’re working on a webhook integration with our .Net web API and having trouble generating the same hash using our secret key and the payload of the requests we’re receiving.

Here’s the payload:
{“account_id”:87817,“account_uuid”:“QWNjb3VudDo4NzgxNw==”,“webhook_type”:“Inventory Update”,“inventory”:[{“sku”:“ESP8741 -0700”,“inventory”:“167”,“backorder_quantity”:“0”,“on_hand”:“172”,“virtual”:false,“sell_ahead”:0,“qty_in_totes”:0,“reserve”:0,“updated_warehouse”:{“warehouse_id”:109822,“warehouse_uuid”:“V2FyZWhvdXNlOjEwOTgyMg==”,“identifier”:“201 - North Las Vegas”,“inventory”:“167”,“backorder_quantity”:“0”,“on_hand”:“172”,“sell_ahead”:0,“qty_in_totes”:0,“reserve”:0}}]}

And the hash from the “X-Shiphero-HMAC-SHA256” header:
“X3yFx9A1+ayrsb5wjHPCqMKFwtlSOVIqGHkDCdFbOrc=”

And the output hash using our secret key from an online HMAC Generator(HMAC-SHA256 Hash Generator | Devglan):
hQDjdn9ViAtILZduQv2zTP/eokn563HsL+SXJ1ptd+o=

image
image1380×677 43.2 KB

Any help would be appreciated!

2

Update:
We got a response from SH on the cause of our issue. Looks like the way we were reading and serializing the body was the issue- if you are running into this issue you’ll want to read the raw body for hashing to confirm the request came from Shiphero.