WebHook not called. WebHook testing tool fails

I developed a Webhook according to the specifications. The only purpose is handling GDPR erase requests.

I am able to test it by sending a POST with curl, filling in the correct body structure and adding the timestamp and signature to the roblox-signature header, as expected from Roblox, according to the specifications. It works as expected. I used the example code from Roblox and set this up as a node.js express app, just like the documentation.

The Webhook appears to be correctly configured on my Webhook Settings page.

I have verified that the Secret being used is in the correct BinaryLike format, generated via crypto.generateKey()

Issues:

  1. the web hook is never called by Roblox
  2. the Test Response button on the Webhook edit page does not function, as follows:

Webhook “Test Response” button failure

When I press this Test Response button, it just hangs with a spinner, indefinitely.

Expect it to report the status of the call, success or failure, catch any error, and report it to the dev, who can iterate until it matches the expected handshake.

Expected behavior

  1. Expect my endpoint to be called with the roblox-signature header according to documentation, and the expected payload format:

{"EventPayload":{"UserId":123456789,"GameIds":[123456789]},"EventType":"RightToErasureRequest"}

  1. Expect the Testing tool to report the status of the test to the developer, instead of locking up.

  2. Expect the configured webhook to be called by Roblox at the expected time, i.e. when a GDPR request comes in. I see them still arriving in my Roblox Inbox, but the Hook endpoint hasn’t been hit by Roblox.

A private message is associated with this bug report

1 Like

UPDATE: The Webhook is now being called successfully by Roblox.

The Test Response button is still locking up every time.

What did you do to successfully test this? I am trying with the Test Webhook button but it is not sending, however any other method posts just fine.

My Webhook code logs a message and I can see it is being hit by Roblox at the appropriate time. The timestamps correspond with the GDPR notification messages in my inbox.

You must take care to generate the Secret according to the specification. It’s not just an arbitrary string.

The Test button on the Webhook page is still unresponsive, even though my production Webhook is proven to be valid. This needs help from a Roblox dev, as it’s the only mechanism we have to verify connectivity, and it’s clearly broken.

1 Like

The issue has been fixed. Please try again.