Skip to content

Webhook Audit Log

Incoming Shopify event payload inspector and reconciliation history

Webhook Secret

Infinite Loop Prevention

1
HMAC-SHA256 Verification
Validates X-Shopify-Hmac-Sha256 header against SHOPIFY_WEBHOOK_SECRET.
2
Pending Lock Check
If local status is pending_update, ignores inbound webhook to avoid clobbering staged changes.
3
Timestamp Guard
Compares Shopify updated_at against local shopify_updated_at to break cyclic triggers.

Registered Webhook Endpoint

Active Receiver

Sample Inbound Payload Structure

{
  "id": 847291038101,
  "title": "Merino Wool Trail Running Socks",
  "body_html": "<p>Breathable, moisture-wicking trail socks designed for endurance athletes.</p>",
  "vendor": "AlpineFlow Gear",
  "product_type": "Apparel",
  "created_at": "2026-10-15T12:00:00-04:00",
  "handle": "merino-wool-trail-running-socks",
  "updated_at": "2026-10-25T14:30:00-04:00",
  "published_at": "2026-10-15T12:00:00-04:00",
  "status": "active",
  "variants": [
    {
      "id": 91827364501,
      "product_id": 847291038101,
      "title": "Small / Forest Green",
      "price": "24.00",
      "sku": "AF-SOCK-S-GRN",
      "inventory_quantity": 45
    }
  ]
}