controller_stripe_webhook

Handle Stripe checkout callbacks.

Accept POST events at /stripe/webhook. Verify the Stripe signature against the raw body using mod_payment_stripe.webhook_secret, then process supported Checkout Session events through the shared payment receive logic. Unknown-payment imports depend on mod_payment configuration. Invalid signatures are rejected; processing failures return an error response for provider retries.

Generate the endpoint through its dispatch rule, for example:

{% url stripe_payment_webhook %}

This provider-facing endpoint uses the verification described above rather than an administrator login.