Files: lib/webhooks/paypal_webhook_handler.rb, lib/webhooks/stripe/payment_event_handler.rb
Implement robust webhook signature verification and replay protection for PayPal and Stripe. Use provider SDKs/verification endpoints and record verification failures.
Suggested steps:
- Implement signature verification using provider-recommended methods.
- Add replay detection and idempotency checks.
- Add unit and e2e tests that include invalid signatures and replayed events.
Priority: P0
Files:
lib/webhooks/paypal_webhook_handler.rb,lib/webhooks/stripe/payment_event_handler.rbImplement robust webhook signature verification and replay protection for PayPal and Stripe. Use provider SDKs/verification endpoints and record verification failures.
Suggested steps:
Priority: P0