Ask Claude to Build Webhook Handlers with Signature Verification and Idempotency

Webhook handlers look simple but hide nasty edge cases — replay attacks, duplicate deliveries, out-of-order events, and payload verification. Claude Code builds handlers that get all of this right from the start.

Build a webhook handler for Stripe payment events. Include signature 
verification, idempotent event processing (don't process the same event 
twice), and proper HTTP responses so Stripe knows we received it.

Claude generates a handler that covers the cases you'd forget:

// Claude builds the complete handler
Route::post('/webhooks/stripe', function (Request $request) {
    // Verify signature to prevent spoofed events
    $payload = $request->getContent();
    $signature = $request->header('Stripe-Signature');
    $event = Webhook::constructEvent($payload, $signature, config('stripe.webhook_secret'));

    // Idempotency — skip if we've already processed this event
    if (ProcessedEvent::where('event_id', $event->id)->exists()) {
        return response('Already processed', 200);
    }

    // Process the event
    match ($event->type) {
        'payment_intent.succeeded' => handlePaymentSuccess($event),
        'invoice.payment_failed' => handlePaymentFailure($event),
        default => null, // Ignore unknown events gracefully
    };

    // Record that we processed it
    ProcessedEvent::create(['event_id' => $event->id]);

    return response('OK', 200);
});

Target different webhook needs:

# Multiple providers
Build webhook handlers for Stripe, GitHub, and SendGrid. 
Each needs its own signature verification method and event routing.

# Queue heavy processing
The webhook handler should acknowledge receipt immediately (200 OK) 
and queue the actual processing as a background job.

# Event ordering
Some events depend on earlier events (invoice.created before invoice.paid). 
Add logic to handle out-of-order delivery gracefully.

Webhooks are the internet calling your code — let Claude build handlers that verify, deduplicate, and process every event reliably.

via Claude Code