Laraval Vapor/Spark (stripe) webhook 403

Can anyone provide any guidance on why my stripe webhooks are returning 403 forbidden? I'm running Spark (stripe) on Vapor. Things I've done so far:

• Added Stripe environment vars
  • CASHIER_CURRENCY=USD
  • CASHIER_CURRENCY_LOCALE=en
  • STRIPE_KEY=[removed]
  • STRIPE_SECRET=[removed]
  • STRIPE_WEBHOOK_SECRET= [removed]
• Verified all the above match what's in Stripe
• Added stripe/webhook to the exception list inside the VerifyCsrfToken middleware
• Re-published my Vapor app

All the requests say 403 Forbidden, but I don't see any useful log messages.

Is there something specific to Vapor that could be stopping the requests?

Plz help :)