I developed a Webhook according to the specifications. The only purpose is handling GDPR erase requests.
I am able to test it by sending a POST with curl, filling in the correct body structure and adding the timestamp and signature to the roblox-signature header, as expected from Roblox, according to the specifications. It works as expected. I used the example code from Roblox and set this up as a node.js express app, just like the documentation.
The Webhook appears to be correctly configured on my Webhook Settings page.
I have verified that the Secret being used is in the correct BinaryLike format, generated via crypto.generateKey()
Issues:
- the web hook is never called by Roblox
- the Test Response button on the Webhook edit page does not function, as follows:
Webhook “Test Response” button failure
When I press this Test Response button, it just hangs with a spinner, indefinitely.
Expect it to report the status of the call, success or failure, catch any error, and report it to the dev, who can iterate until it matches the expected handshake.
Expected behavior
- Expect my endpoint to be called with the
roblox-signatureheader according to documentation, and the expected payload format:
{"EventPayload":{"UserId":123456789,"GameIds":[123456789]},"EventType":"RightToErasureRequest"}
-
Expect the Testing tool to report the status of the test to the developer, instead of locking up.
-
Expect the configured webhook to be called by Roblox at the expected time, i.e. when a GDPR request comes in. I see them still arriving in my Roblox Inbox, but the Hook endpoint hasn’t been hit by Roblox.
A private message is associated with this bug report

