How do I verify webhook signatures?

Tern provides easy webhook signature verification using HMAC algorithms. Simply import WebhookVerificationService and call verify() or verifyWithPlatformConfig() with your webhook request and secret key.

What webhook platforms does Tern support?

Tern supports Stripe, GitHub, Clerk, Shopify, Vercel, Polar, Supabase, Dodo Payments, and any custom webhook platform through configurable signature verification.

Yes, Tern is fully open source under the MIT license and available on GitHub at github.com/Hookflo/tern

Cloudflare Workers

Framework — Cloudflare Workers

Webhook verification
at the edge.

Name: Tern Webhook Verification
Rating: 5.0 (100 reviews)
Author: Hookflo

Web Crypto API native. No Node.js dependencies. Runs in V8 isolates across Cloudflare's global network.

$ npm i @hookflo/tern

src/index.ts

import { createWebhookHandler } from '@hookflo/tern/cloudflare'
export interface Env {
  WEBHOOK_SECRET:             string
  QSTASH_TOKEN:               string
  QSTASH_CURRENT_SIGNING_KEY: string
  QSTASH_NEXT_SIGNING_KEY:    string
  [key: string]: unknown
}
export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    const handler = createWebhookHandler({
      platform: 'stripe',
      secret:   env.WEBHOOK_SECRET,  // ← env, not process.env
      handler:  async (payload) => {
        return { received: true }
      }
    })
    return handler(request, env)  // ← pass env as second arg
  }
}

Setup

Up and running
in three steps.

Create a worker

npm create cloudflare@latest my-webhook-worker
cd my-webhook-worker
npm i @hookflo/tern

Write your handler

# See the code examples below

Deploy

npx wrangler dev    # local testing
npx wrangler deploy # production

src/index.ts

import { createWebhookHandler } from '@hookflo/tern/cloudflare'
export interface Env {
  WEBHOOK_SECRET:             string
  QSTASH_TOKEN:               string
  QSTASH_CURRENT_SIGNING_KEY: string
  QSTASH_NEXT_SIGNING_KEY:    string
  [key: string]: unknown
}
export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    const handler = createWebhookHandler({
      platform: 'stripe',
      secret:   env.WEBHOOK_SECRET,  // ← env, not process.env
      handler:  async (payload) => {
        return { received: true }
      }
    })
    return handler(request, env)  // ← pass env as second arg
  }
}

Key differences

Next.js vs
Cloudflare Workers.

Property	Next.js	Cloudflare Workers
Runtime	Node.js	V8 isolates
Env vars	process.env	env parameter
queue: true	✓	✗
Import	/nextjs	/cloudflare
handler args	(request)	(request, env)
Crypto	Node crypto	Web Crypto API
Deploy	Vercel	wrangler deploy