Lemon Squeezy webhook

Failed subscription payments, cancellations, refunds and new orders from Lemon Squeezy.

Setup

1. In PingLoom open Webhooks, choose New webhook source, pick Lemon Squeezy and create it. Copy the endpoint URL and the signing secret. The secret is shown once.
2. In Lemon Squeezy open Settings, then Webhooks, and choose Add webhook (use test mode first if you like).
3. Paste the PingLoom URL as the Callback URL and the PingLoom secret as the Signing secret.
4. Select subscription_payment_failed, subscription_cancelled, order_refunded and order_created, then save.
5. Use Simulate event in Lemon Squeezy. It appears under Recent requests on the PingLoom source page.

Verification

Lemon Squeezy signs the raw request body with HMAC-SHA256 and the signing secret you type when you create the webhook, and sends the hex digest in X-Signature. It documents no signed timestamp and no event id, so PingLoom builds an id from the event name, the object id and its updated time to drop repeats.

Events

You choose which events become alerts when you create the source, and you can change it later on the source page.

PingLoom keeps the amount, order number and status and a masked email such as d***@example.com. Names are never copied.