I receive webhooks that are not validated by signature check.
I found that such requests have
"square-environment": "Staging"
instead of
"square-environment": "Production"
what that can be?
Hi @Ross123, this was an issue on our end which has since been resolved. 
ok, probably that not related, because I found requests with environment production but also with signature mismatch
Do I need to replace \n or any other symbols in the request.body before creating hmac-sha1.
documentation says I need to exclude all whitespace from request.body.
Do I really need to make a replacement like replace(/\s+/g, "") ?
What is your application Id so we can take a look.