recur-webhooks

What problem does it solve?

Secure, scalable webhook handling for Recur payments requires rigorous signature verification and idempotent processing to prevent duplicate actions and ensure correct entitlement states.

Core Features & Use Cases

• Signature verification using HMAC-SHA256 with Base64-encoded payloads.
• Idempotent event handling to deduplicate webhook deliveries.
• Endpoints and handlers for checkout.completed, subscription.activated, subscription.cancelled, subscription.renewed, subscription.past_due, order.paid, and refund.created.
• Payload schema and testing guidance for local development and staging.

Quick Start

Start the webhook listener and verify signature validation along with idempotent handling using a test event.