Missing stripe-signature header
/api/webhooks/stripe rejected the request because the stripe-signature header was missing (400).
Why this happens
Non-Stripe callers hitting the webhook URL, a proxy stripping headers, or a misconfigured Stripe endpoint (wrong URL/method). Without the header, the site cannot verify the event.
Diagnose and fix
1. In Stripe Dashboard → Webhooks, use this site’s Stripe webhook URL over HTTPS.
2. Ensure nothing in front of the app strips custom headers.
3. Do not curl the webhook without a valid Stripe-signed payload.
4. After fixing, confirm events show as delivered; see Stripe for signing secret setup.