EventSub HMAC SHA256 Invalid on Production

[BarryCarlyon]

@BarryCarlyon

Additionally:

$body = json_encode($request->post());

Use the RAW body not a rencoded JSON payload. Otherwise any payload that has emoji’s in will always fail or you’ll get other weirdness, as Twitch calculates their has using the RAW payload, but you are caclulating the comparisons using a decoded and reencoded payload which could differ

Then I expect this is the problem, you are caclulating the hash using a reencoded JSON payload instead of the RAW payload

@DeeRockUK

so whether Laravel deep down lowercase this with the method header()

Yeah I thought it would but in PHP I always would refer to my headers as all lowercase.

@DeeRockUK

they had to call toLowerCase() on each of the headers

Yeah it’s a very confusing code exmaple… Why waste as cycle toLowerCaseing whne they can be lowercase to start with…

@DeeRockUK

EDIT:

I just seen your own edit about the payload being re-encoded. Interesting theory… Let me try a few things on that!

EDIT TAG. YOU ARE IT!