Integration · Shopify
Shopify webhook reliability with replay and DLQ
Charon Gate captures Shopify webhooks the moment they leave Shopify's edge: HMAC verification on X-Shopify-Hmac-Sha256, dead-letter queue when your destination is offline, and one-click replay so you don't lose orders/create or app/uninstalled when your handler is being deployed.
Why Charon Gate for Shopify
- Constant-time X-Shopify-Hmac-Sha256 verification — Shopify's preferred 60-byte HMAC.
- Survives Shopify's narrow 19-second response window: Charon ingests in milliseconds and absorbs the latency on your behalf.
- Tenant-isolated retention windows let merchants on shared stacks keep customer payloads within tight compliance bounds.
- Replay groups of events — for example, every orders/* event on a particular shop in the last 24 hours — without manual scripting.
How verification works
- Header
- X-Shopify-Hmac-Sha256
- Algorithm
- HMAC-SHA256 (Base64-encoded digest)
- Upstream docs
- shopify.dev/docs/apps/webhooks
Example Shopify events
Charon Gate is event-shape agnostic — these are typical Shopify event types our customers route through us today.
orders/createorders/paidorders/cancelledproducts/updateapp/uninstalledcustomers/data_requestFAQ
- Does Charon support Shopify's GDPR mandatory webhooks?
- Yes. customers/data_request, customers/redact, and shop/redact are accepted, verified, forwarded, and (importantly) auditable in the dashboard so compliance teams can prove receipt + acknowledgement.
Ready when you are
Front your Shopify webhooks with Charon Gate in 90 seconds.