webhook-integration
Implement secure webhook systems for event-driven integrations, including signature verification, retry logic, and delivery guarantees. Use when building third-party integrations, event notifications, or real-time data synchronization.
By aj-geddes · 443 installs
npx skills add aj-geddes/useful-ai-prompts --skill webhook-integration
Source repository · Upstream listing
Webhook Integration
Table of Contents
[Overview]( overview)
[When to Use]( when to use)
[Quick Start]( quick start)
[Reference Guides]( reference guides)
[Best Practices]( best practices)
Overview
Implement robust webhook systems for event driven architectures, enabling real time communication between services and third party integrations.
When to Use
Third party service integrations (Stripe, GitHub, Shopify)
Event notification systems
Real time data synchronization
Automated workflow triggers
Payment processing callbacks
CI/CD pipeline notifications
User activity tracking
Microservices communication
Quick Start
Minimal working example:
Reference Guides
Detailed implementations in the references/ directory:
Guide Contents
[Webhook Sender (TypeScript)](references/webhook sender typescript.md) Webhook Sender (TypeScript)
[Webhook Receiver (Express)](references/webhook receiver express.md) Webhook Receiver (Express)
[Webhook Queue with Bull](references/webhook queue with bull.md) Webhook Queue with Bull
[Webhook Testing Utilities](references/webhook testing utilities.md) Webhook Testing Utilities
Best Practices
✅ DO
Use HMAC signatures for verification
Implement idempotency with event IDs
Return 200 OK quickly, process asynchronously
Implement exponential backoff for retries
Include timestamp to prevent replay attacks
Use queue systems for reliable delivery
Log all delivery attempts
Provide webhook testing tools
Document webhook payload schemas
Implement webhook management UI
Allow filtering by event types
Support webhook versioning
❌ DON'T
Send sensitive data in webhooks
Skip signature verification
Block responses with heavy processing
Retry indefinitely
Expose internal error details
Send webhooks to localhost (in production)
Forget timeout handling
Skip rate limiting