woocommerce-webhooks

Verify WooCommerce webhook signatures by validating the X-WC-Webhook-Signature header against the raw request body using your WOOCOMMERCE_WEBHOOK_SECRET with HMAC SHA-256. This Skill automates that exact verification process across Node.js, Next.js, and FastAPI frameworks.

WooCommerce webhook signature verification fails when raw body parsing is not enabled or the WOOCOMMERCE_WEBHOOK_SECRET is mismatched. The signature must be computed against the exact raw request body, so any framework-level body parsing modifications will break the HMAC SHA-256 validation.

Yes, raw body parsing is explicitly required to verify WooCommerce webhooks. The HMAC SHA-256 signature validation depends on the original, unparsed request payload to ensure secure and deterministic processing of incoming events.

Supported WooCommerce webhook events include order.created, order.updated, product.created, product.updated, and customer.created. The Skill validates these incoming authenticated payloads and prepares them for deterministic downstream routing and handler processing.

Yes, you can use this Skill to handle WooCommerce webhooks in Next.js. It provides framework-specific implementation examples for Next.js alongside Node.js/Express and FastAPI to validate signatures and route payloads securely.