Integration · Shopify

Shopify webhook reliability with replay and DLQ

Charon Gate captures Shopify webhooks the moment they leave Shopify's edge: HMAC verification on X-Shopify-Hmac-Sha256, dead-letter queue when your destination is offline, and one-click replay so you don't lose orders/create or app/uninstalled when your handler is being deployed.

Why Charon Gate for Shopify

  • Constant-time X-Shopify-Hmac-Sha256 verification — Shopify's preferred 60-byte HMAC.
  • Survives Shopify's narrow 19-second response window: Charon ingests in milliseconds and absorbs the latency on your behalf.
  • Tenant-isolated retention windows let merchants on shared stacks keep customer payloads within tight compliance bounds.
  • Replay groups of events — for example, every orders/* event on a particular shop in the last 24 hours — without manual scripting.

How verification works

Header
X-Shopify-Hmac-Sha256
Algorithm
HMAC-SHA256 (Base64-encoded digest)
Upstream docs
shopify.dev/docs/apps/webhooks

Example Shopify events

Charon Gate is event-shape agnostic — these are typical Shopify event types our customers route through us today.

orders/createorders/paidorders/cancelledproducts/updateapp/uninstalledcustomers/data_request

FAQ

Does Charon support Shopify's GDPR mandatory webhooks?
Yes. customers/data_request, customers/redact, and shop/redact are accepted, verified, forwarded, and (importantly) auditable in the dashboard so compliance teams can prove receipt + acknowledgement.

Ready when you are

Front your Shopify webhooks with Charon Gate in 90 seconds.

Start free