WebhookController.php

<?php

namespace Miracode\StripeBundle\Controller;

use Miracode\StripeBundle\Event\StripeEvent;
use Miracode\StripeBundle\Stripe\StripeObjectType;
use Miracode\StripeBundle\StripeException;
use Stripe\Error\SignatureVerification;
use Stripe\Exception\SignatureVerificationException;
use Stripe\Webhook;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\EventDispatcher\EventDispatcherInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Stripe\Event as StripeEventApi;
use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;

class WebhookController extends AbstractController
{

    private $eventDispatcher;

    public function __construct(EventDispatcherInterface $eventDispatcher)
    {
        $this->eventDispatcher = $eventDispatcher;
    }
    
    /**
     * @param Request $request
     *
     * @return Response
     * @throws StripeException
     */
    public function handleAction(Request $request)
    {

        $requestData = json_decode($request->getContent());

        if (!isset($requestData->id) || !isset($requestData->object)) {
            throw new BadRequestHttpException('Invalid webhook request data');
        }

        // If event id ends with 14 zero's then it is a test webhook event. Return 200 status.
        if(substr($requestData->id, -14 ) == "00000000000000"){
            return new Response('Webhook test successful', 200);
        }

        if ($requestData->object !== StripeObjectType::EVENT) {
            throw new StripeException('Unknown stripe object type in webhook');
        }

        // Secure webhook with event signature: https://stripe.com/docs/webhooks/signatures
        $webhookSecret = $this->getParameter('miracode_stripe.webhook_secret');

        $verifySignature = $this->getParameter('verify_stripe_signature');

        if($verifySignature === true && $webhookSecret !== null) {
            $sigHeader = $request->headers->get('Stripe-Signature');
            try {
                $event = Webhook::constructEvent(
                    $request->getContent(), $sigHeader, $webhookSecret
                );
            } catch(\UnexpectedValueException $e) {
                // Invalid payload
                throw new StripeException(
                    sprintf('Invalid event payload', $requestData->id)
                );
            } catch(SignatureVerificationException $e) {
                // Invalid signature
                throw new StripeException(
                    sprintf('Invalid event signature', $requestData->id)
                );
            }
        }

        $stripeEventApi = new StripeEventApi();

        if (!$stripeEventObject = $stripeEventApi->retrieve($requestData->id)) {
            throw new StripeException(
                sprintf('Event does not exists, id %s', $requestData->id)
            );
        }

        $event = new StripeEvent($stripeEventObject);
        $this->eventDispatcher->dispatch($event, 'stripe.' . $stripeEventObject->type);

        return new Response();
    }
}