Bump version to 0.27.1

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.27.1] - 2026-09-29
+### Added
+- Temp logger for Stripe webhook
+
 ## [0.27.0] - 2026-09-29
 
 ### Added

composer.json

@@ -2,7 +2,7 @@
   "name": "boboko/core",
   "description": "Core module — authentication and shared panel behaviour",
   "type": "library",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "autoload": {
     "psr-4": {
       "Modules\\Core\\": "src/"

package.json

@@ -1,6 +1,6 @@
 {
     "name": "@boboko/core",
-    "version": "0.27.0",
+    "version": "0.27.1",
     "private": true,
     "type": "module",
     "description": "Portable Stimulus controllers and styles for boboko-core's cart + checkout module. Installed as a real npm dependency (file:../boboko-core in dev, a tagged git install in prod) so a consuming app's `npm install` resolves this package's own dependencies (leaflet, @hotwired/stimulus) transitively, the same way `composer update boboko/*` does for PHP. See CONTRIBUTE.md's \"JS/CSS: a real npm package\" section.",

src/Payment/Http/Middleware/StripeWebhookMiddleware.php

@@ -33,6 +33,17 @@ class StripeWebhookMiddleware
                 $secret
             );
         } catch (UnexpectedValueException|SignatureVerificationException $e) {
+            \Illuminate\Support\Facades\Log::error('Stripe webhook signature verification failed', [
+                'signature_header' => $stripeSig,
+                'secret_prefix' => substr((string) $secret, 0, 12),
+                'secret_length' => strlen((string) $secret),
+                'body_length' => strlen($request->getContent()),
+                'body_sha256' => hash('sha256', $request->getContent()),
+                'body_raw' => $request->getContent(),
+                'content_type' => $request->header('Content-Type'),
+                'content_encoding' => $request->header('Content-Encoding'),
+            ]);
+
             abort(400, $e->getMessage());
         }