Thanks for your reply. I originally thought those headers were there because I was forwarding requests to an ngrok server over to my local dev server, but I was able to test this in a live env and we do pass requests through another server first. I'm unable to send requests straight to the server because I can't change our underlying system. Also, we always pass requests through another server first and we only have this issue with the Stripe Apple Pay integration. I thought maybe there was a reason why this header was blank, like there was something wrong on Stripe's end. If there's not a real problem then we can just handle the blank header on our side. I'm also realizing that both you and I included the IP address in the HTTP_X_FORWARDED_FOR header in previous comments, but I am unable to edit mine. Are you able to edit or delete past comments so we can remove that IP address?