mollie-checkout-validator

Verify Mollie webhook signatures using constant-time HMAC validation to ensure secure checkout flows. This prevents tampering by cryptographically authenticating incoming payment notifications before any processing occurs.

Prevent duplicate processing of Mollie payment webhooks by implementing a Redis-backed idempotency store with a TTL. This ensures each webhook event is handled only once, even if delivered multiple times.

Retrieve payment status from the Mollie API instead of trusting webhook payloads to guarantee status integrity. Fetching fresh data directly from the API prevents spoofing and ensures your order updates reflect actual payment states.

Audit a Mollie checkout integration for security and reliability by checking webhook handling, payment creation, and order updates. The process enforces HMAC validation, Redis-backed idempotency, and API-driven status retrieval for end-to-end correctness.

You need Redis to handle idempotency checks for Mollie payments, as the audit enforces a Redis-backed idempotency store with TTL. This dependency is required to prevent duplicate processing of identical webhook events.