Webhooks in Production

Most webhook bugs show up under load. The fixes are boring — and essential.

Use idempotency keys

Store a request key and ignore duplicates.

// pseudo-code
if (alreadyProcessed(idempotencyKey)) return 200
processEvent()
markProcessed(idempotencyKey)

Retries must be safe

• Retry only when you can guarantee idempotency
• Use exponential backoff

Always log

Make every run traceable with correlation IDs.