Payment Webhooks Must Be Idempotent

Payment webhooks may be retried when a provider does not receive a timely successful response. Your application must be able to process the same event more than once without creating duplicate orders, credits, or fulfillment actions.Verify the provider's signature using the documented method and the raw request body where required. Reject invalid signatures and avoid trusting a browser redirect as...