Hello,
I believe there is an error in the documentation regarding the validation of V3 request signatures: Webhooks | Validating Requests - HubSpot docs
I am receiving HTTP requests from the new hubspot.fetch() function: Fetching data for UI extensions - HubSpot docs
My signatures never matched the provided signature. After trying to modify all possible values without success, I ran the code from hubspot-api-nodejs/src/utils/signature.ts at master · HubSpot/hubspot-api-nodejs · GitHub locally to understand the individual steps. The string to be hashed is not decoded as described in the documentation. The “@” sign in the user’s email address must remain as “%40” for the signature to be correct:
POSThttp://localhost:9876/api/hubspot/ping?userEmail=max.power%40example.com&userId=65555555&portalId=145333333&appId=4166666{“message”:“Hello World!”}1729605403190
Can you confirm this? Or did I somehow misunderstand the part about decoding?