Handling Stripe Webhooks

You can choose between two methods:

Setting Up the Stripe Webhook

You need to create a webhook endpoint in the Stripe Dashboard and configure your Firebase Secret Manager.

Go to your Stripe Dashboard → Developers → Webhooks
Click “+ Add endpoint”
Enter your Firebase HTTPS function URL (should look like this after deployment, we will edit later):
```
https://us-central1-YOUR_PROJECT.cloudfunctions.net/stripeWebhooks
```
Under “Select events to send”, enable the following events:
- checkout.session.completed – triggered when a checkout session (payment or subscription) completes.
- customer.subscription.updated – triggered when a subscription is modified (upgrade, downgrade, cancel).
- invoice.payment_succeeded – triggered when an invoice is successfully paid (renewals, upgrades).
Click Add endpoint to save.

Once created, Stripe will show you a Webhook Signing Secret (starts with whsec_...). Copy this value — you’ll need it for Firebase.

Use the Firebase CLI to securely store your Stripe secrets:

firebase functions:secrets:set STRIPE_SECRET_KEY
firebase functions:secrets:set STRIPE_WEBHOOK_SECRET

When prompted, paste your actual keys:

STRIPE_SECRET_KEY: your Stripe secret API key (starts with sk_live_... or sk_test_...)
STRIPE_WEBHOOK_SECRET: your webhook secret from Stripe

The Firebase Functions webhook handler is located at:

functions/hooks/stripe-webhooks.ts

Make sure you include it in functions/index.ts

Now you're ready to deploy your webhook handler function:

cd functions
firebase deploy --only functions

cd functions
npm run deploy

You should see:

Before you test your webhook, you may need to set Stripe webhooks to public access

Use the Stripe CLI to send test events:

stripe listen --forward-to https://us-central1-YOUR_PROJECT.cloudfunctions.net/stripeWebhooks

Then trigger test events:

stripe trigger payment_intent.succeeded
stripe trigger customer.subscription.created