It’s a pure Node Express HTTPS server. I have middleware that alerts when ANY request is made across the domain. I’m able to do Oauth authentication, various other api requests from Twitch, so it’d be hard to believe the GET request sending the challenege would somehow be the only thing filtered out.
It would be nice if they sent something other than 202 if their GET challenge request wasn’t received properly. I’m using webhooks fine on other services such as Paypal and Discord currently with the same server.