Webhooks · 9 min read
Webhook signature checks that fail or quietly pass in Go
Avoid the mistakes that break or weaken webhook signature checks in Go, and see how GitHub, Stripe and Standard Webhooks differ in practice.
Receiving webhooks safely: signatures, deduplication, retries and queues, with real provider examples.
Webhooks · 9 min read
Avoid the mistakes that break or weaken webhook signature checks in Go, and see how GitHub, Stripe and Standard Webhooks differ in practice.
Webhooks · 8 min read
Build a webhook job queue on one SQLite table: claim work with leases, retry with jittered backoff, dead-letter poison events and replay them safely.
Webhooks · 9 min read
Handle at-least-once webhook delivery safely: pick event ids, use unique constraints, size the dedupe window and make side effects run once.
Webhooks · 8 min read
Write a dependency-free Go verifier for Standard Webhooks signatures as used by Polar, with secret rotation, replay protection and a known-answer test.
Webhooks · 9 min read
Build a webhook receiver in Go that verifies signatures, dedupes deliveries, stores events in SQLite and processes them with retries, on one VPS.