Never lost, never fake
Events are queued in the same database write that caused them, and each delivery is signed so receivers know it's really you.
Stuur ondertekende events naar de apps van je klanten, met retries en replay ingebouwd.
Stuur ondertekende events naar de apps van je klanten, met retries en replay ingebouwd.
Productvoorbeeld
Dit is hetzelfde visuele component als in de ingelogde applicatie, met voorspelbare voorbeelddata.
Compare a successful signed delivery with a dead delivery that remains replayable.
Inerte voorbeelddata · geen netwerktoegang
Voorbeeld gereed
Kernpunten
Events are queued in the same database write that caused them, and each delivery is signed so receivers know it's really you.
If a receiver is down, delivery retries up to 8 times with growing delays, then stops cleanly instead of looping forever.
Every attempt is logged with its status and response. Admins can replay failed deliveries for 30 days.
Zonder een gedeelde basis bouwt elk team deze randgevallen opnieuw — en anders.
Your customer's server was down for a deploy. The webhook you sent inline with the request just died. No record, no retry, no way to resend. They find out a week later, from their own customer.
Your customer's security review asks how they verify your webhooks. Without signatures and timestamps, the honest answer is 'you can't.' That's a bad meeting. Signed events make it a short one.
A customer reports a missing event. Without attempt history, you're grepping logs and guessing. With it, you see the 503 on attempt three, and you hit replay.
Het mechanisme van begin tot eind, zoals het in de repository is geïmplementeerd.
Events queue with the write
The event enters the queue in the same transaction as the change itself. If the change rolls back, no event. If it saves, the event can't be dropped.
A worker signs and sends
A background worker signs each delivery with the endpoint's secret and posts it with signature and timestamp headers, under a strict timeout.
Every attempt is recorded
Each try gets a durable attempt number and a logged result. Only server errors and timeouts retry; a hard failure like a 404 settles right away.
Dead letters wait for you
After 8 tries or 30 days, a delivery is marked dead instead of looping forever. Admins can replay it through the same worker, safely.
Technische garanties
Achter de schermen houden autorisatie, tenantgrenzen en foutafhandeling één duidelijke eigenaar. Zo blijft de snelle ervaring voor gebruikers gekoppeld aan veilig herstel als het misgaat.
De grens hierboven is geen claim maar code. Deze bestanden dragen het contract:
src/registries/webhook-events.tssrc/features/developer-platform/delivery.tssrc/features/developer-platform/jobs.tssrc/features/developer-platform/crypto.server.tsDeze functies delen contracten en grenzen met deze pagina.
De documentatie beschrijft dezelfde contracten die deze pagina demonstreert.