fixed webhook signature mismatch in case json_encode/decode issue (#251)

razorpay · Jun 3, 2021 · f117540 · f117540
1 parent 9da0934
commit f117540
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/Controller/Payment/Webhook.php b/Controller/Payment/Webhook.php
@@ -135,7 +135,9 @@ public function execute()
 
                 try
                 { 
-                    $this->rzp->utility->verifyWebhookSignature(json_encode($post), $_SERVER['HTTP_X_RAZORPAY_SIGNATURE'], $webhookSecret);
+                    $postData = file_get_contents('php://input');
+
+                    $this->rzp->utility->verifyWebhookSignature($postData, $_SERVER['HTTP_X_RAZORPAY_SIGNATURE'], $webhookSecret);
                 }
                 catch (Errors\SignatureVerificationError $e)
                 {

diff --git a/composer.json b/composer.json
@@ -1,7 +1,7 @@
 {
     "name": "razorpay/magento",
     "description": "Razorpay Magento 2.0 plugin for accepting payments.",
-    "version": "3.5.2",
+    "version": "3.5.3",
     "require": {
         "php": "~5.5.0|~5.6.0|^7.0",
         "razorpay/razorpay": "2.*"

diff --git a/etc/module.xml b/etc/module.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0"?>
 <config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:framework:Module/etc/module.xsd">
-    <module name="Razorpay_Magento" setup_version="3.5.2">
+    <module name="Razorpay_Magento" setup_version="3.5.3">
 	    <sequence>
 	        <module name="Magento_Sales" />
 	        <module name="Magento_Payment" />