line-webhook

Validate HMAC-SHA256 signatures and deduplicate LINE webhook events.

2|Updated Apr 3, 2026
One-click install
npx skills add https://github.com/thepnatee/developer-tools-builder-document --skill line-webhook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: line-webhook
Source: https://github.com/thepnatee/developer-tools-builder-document/tree/main/skills/line-webhook
Command: npx skills add https://github.com/thepnatee/developer-tools-builder-document --skill line-webhook

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers build secure and reliable LINE webhook systems by handling event reception, verification, duplicate prevention, and production-ready processing patterns.

Core Features & Use Cases

  • Webhook Security: Implements HMAC-SHA256 signature verification and raw body validation to ensure requests are genuinely from LINE.
  • Event Processing: Handles message, follow, postback, join, redelivery, and other LINE webhook event types with practical server patterns.
  • Production Reliability: Provides Firebase and Firestore idempotency strategies, content retrieval workflows, and error handling for scalable chatbot backends.

Quick Start

Use the line-webhook skill to create a production-ready LINE webhook handler with signature verification and Firestore event deduplication.

Frequently Asked Questions about line-webhook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify LINE webhook signatures using HMAC-SHA256?

LINE webhook signature verification uses HMAC-SHA256 validation against the raw request body to ensure incoming events are genuinely from LINE. This prevents unauthorized requests from triggering your chatbot workflows.

What's the best way to prevent duplicate LINE webhook event execution in Firebase?

Preventing duplicate LINE webhook execution requires Firestore idempotency storage strategies to track processed event IDs. This ensures redelivery events from the Messaging API do not trigger repeated chatbot actions.

Can I use an Express server to handle LINE Messaging API postback and follow events?

Express servers can handle LINE Messaging API events including message, postback, follow, and join types. The webhook processing system routes these events to appropriate handlers for chatbot response generation.

Why does my LINE webhook fail when processing raw body requests?

LINE webhook requests fail when raw body validation is bypassed or altered before HMAC-SHA256 signature verification. Maintaining the original raw request body is critical for accurate signature matching and secure event processing.

Does LINE webhook redelivery require special error handling for production chatbots?

LINE webhook redelivery requires production error handling patterns and idempotency checks to manage duplicate events. Implementing content retrieval workflows and Firestore deduplication ensures scalable chatbot backend reliability.