fix(payment-stripe): handle Stripe webhook signature errors

Wrap the constructEvent call in constructWebhookEvent with a try/catch
that rethrows through buildError, matching the error-handling convention
used by every other method in this provider. Stripe's constructEvent
throws a StripeSignatureVerificationError on an invalid or missing
signature; normalizing it here keeps webhook failures consistent with
the rest of the module's error output.

Author: calebcgates

.changeset/stripe-construct-webhook-error-handling.md

@@ -0,0 +1,5 @@
+---
+"@medusajs/payment-stripe": patch
+---
+
+fix(payment-stripe): normalize errors thrown while constructing Stripe webhook events

packages/modules/providers/payment-stripe/src/core/__tests__/stripe-base.spec.ts

@@ -1,3 +1,4 @@
+import type { ProviderWebhookPayload } from "@medusajs/framework/types"
 import type { StripeOptions } from "../../types"
 
 import IdealProviderService from "../../services/stripe-ideal"
@@ -76,4 +77,17 @@ describe("StripeBase", () => {
       expect(params.capture_method).toBe("manual")
     })
   })
+
+  describe("constructWebhookEvent", () => {
+    it("wraps signature verification failures with a normalized error", () => {
+      const service = new StripeProviderService({}, defaultOptions)
+
+      expect(() =>
+        service.constructWebhookEvent({
+          rawData: "{}",
+          headers: { "stripe-signature": "invalid-signature" },
+        } as ProviderWebhookPayload["payload"])
+      ).toThrow("An error occurred in constructWebhookEvent")
+    })
+  })
 })

packages/modules/providers/payment-stripe/src/core/stripe-base.ts

@@ -801,11 +801,15 @@ abstract class StripeBase extends AbstractPaymentProvider<StripeOptions> {
   constructWebhookEvent(data: ProviderWebhookPayload["payload"]): Stripe.Event {
     const signature = data.headers["stripe-signature"] as string
 
-    return this.stripe_.webhooks.constructEvent(
-      data.rawData as string | Buffer,
-      signature,
-      this.options_.webhookSecret
-    )
+    try {
+      return this.stripe_.webhooks.constructEvent(
+        data.rawData as string | Buffer,
+        signature,
+        this.options_.webhookSecret
+      )
+    } catch (error) {
+      throw this.buildError("An error occurred in constructWebhookEvent", error)
+    }
   }
   protected buildError(message: string, error: Error): Error {
     const errorDetails =