作者 lyh

gx数据

@@ -144,16 +144,16 @@ class PayStripeApi @@ -144,16 +144,16 @@ class PayStripeApi
144 { 144 {
145 try { 145 try {
146 // Webhook 签名密钥(从 Stripe 仪表盘获取) 146 // Webhook 签名密钥(从 Stripe 仪表盘获取)
147 -// $endpointSecret = 'whsec_garhW2TrCIrduyM3rve9mFS2sn69B9Yt'; 147 + $endpointSecret = 'whsec_garhW2TrCIrduyM3rve9mFS2sn69B9Yt';
148 // 获取原始请求内容 148 // 获取原始请求内容
149 $payload = request()->getContent(); 149 $payload = request()->getContent();
150 // 获取 Stripe 签名头 150 // 获取 Stripe 签名头
151 -// $sigHeader = request()->header('Stripe-Signature');  
152 -// // 验证签名  
153 -// if (!self::verifySignature($payload, $sigHeader, $endpointSecret)) {  
154 -// http_response_code(400);  
155 -// throw new \Exception('Invalid signature');  
156 -// } 151 + $sigHeader = request()->header('Stripe-Signature');
  152 + // 验证签名
  153 + if (!self::verifySignature($payload, $sigHeader, $endpointSecret)) {
  154 + http_response_code(400);
  155 + throw new \Exception('Invalid signature');
  156 + }
157 $event = json_decode($payload, true); 157 $event = json_decode($payload, true);
158 // 获取事件类型 158 // 获取事件类型
159 $eventType = $event['type']; 159 $eventType = $event['type'];