Raw-byte Stripe and GitHub signature checks
Start with the defensive path already connected and tested.
Backend Reliabilityv0.1.0
Webhook Signature & Replay Protection Mini
Verify Stripe/GitHub signatures and persistently classify duplicate deliveries with a compact Python source kit.
Python 3.9+SQLiteStandard library
$19One-time source-code purchase
Buy for $19PRODUCT OVERVIEW
11 tests passed from extracted ZIPStandard-library dependenciesSynthetic local output verifiedZIP SHA-256 recorded
The reason to buy
What this saves you from building
You are not paying for a file count. You are skipping the failure handling, verification, documentation, and operational edge cases behind the feature.
Stripe timestamp and rotating-secret handling
Use the documented CLI behavior and examples as a focused starting point.
Persistent duplicate identity claim
Run the included tests and synthetic example before using your own data.
What's included
Connected infrastructure, ready to adapt
- Exact raw-body signature verification
- Stripe 300-second timestamp window
- GitHub SHA-256 signature adapter
- SQLite new/duplicate/conflict classification
- Synthetic offline demo and WSGI example
- Tests, README, commercial license, and support terms
Typeset output evidence
Inspect the CLI, data, and QA results.
One card typesets verified output from the included synthetic local demo. This CLI kit has no browser UI.
Architecture
A small, inspectable workflow
Each step has a clear responsibility and can be adapted without turning the kit into a platform dependency.
01Receive bytes
02Verify
03Record identity
04Classify
Quickstart
From ZIP to verified local flow
- Unzip into a controlled local directory
- Run the included tests
- Run the synthetic offline demo
- Adapt the WSGI boundary and application recovery flow
python3 -m unittest discover -s tests -v
python3 -m examples.demoTests / QA
Evidence instead of invented trust signals.
No fake customer logos, usage numbers, or testimonials. These are the checks verified for this release.
- 11 tests passed from extracted ZIP
- Standard-library dependencies
- Synthetic local output verified
- ZIP SHA-256 recorded
Best fit
Who this is for
- Python developers receiving Stripe or GitHub webhooks
- Teams with an existing durable business workflow
Not included
Where the kit stops
- Processing queue, retries, or DLQ
- Administrator replay or receipt history
- GUI, hosting, or custom integration
License
Commercial use, without template redistribution.
One individual or legal entity may modify the source, use it across multiple internal projects, and incorporate it into client deliverables. Reselling, publicly redistributing, or repackaging the kit itself is not permitted.
License summarySupport
Product bugs and documented setup.
Support includes reproducible product bugs and documented setup questions. Custom development, project-specific integration, deployment, SLA, and perpetual updates are not included.
Support policyKnown limitations
Review the boundaries before buying.
- A new identity does not mean downstream business processing succeeded; provide a recovery path.
- A valid first-seen GitHub payload has no signed freshness proof.
- Single trusted SQLite deployment; protect and back up the database.
Product FAQ
Before you buy
Is this a GUI or hosted service?
No. This is a downloadable source-code CLI kit. Hosting, deployment, and custom integration are not included.
Can I use it commercially?
Yes, for one individual or one legal entity under the included license. The kit itself may not be redistributed or resold as a template.
What support is included?
Reproducible defects in the kit and documented local setup questions. No SLA, custom development, or perpetual updates.
BuildShelf · Source code starter kit
Skip the foundation. Build the differentiated part.
Webhook Signature & Replay Protection Mini