Webhooks

Handle all Shopify webhook topics at a single endpoint.

All four GDPR + app/uninstalled topics are routed here. HMAC is verified before any payload parsing. Returns 200 for all valid requests, 401 for HMAC failures.