The Next.js Webhook Receivers skill equips Claude with architectural patterns and security best practices for handling incoming webhooks from providers like Stripe, GitHub, and payment service providers. It guides the implementation of Next.js Route Handlers featuring timing-safe signature verification (HMAC/RSA), raw request body extraction, timestamp-based replay attack mitigation, and robust idempotency storage. Use this skill whenever you need to reliably ingest third-party callbacks, avoid duplicate event processing, and correctly format HTTP response codes for provider retry mechanisms.
主な機能
01Clear HTTP status code matrix (2xx, 4xx, 5xx) to accurately control provider retry behavior
02Cryptographic signature verification using timing-safe comparisons to prevent timing attacks
030 GitHub stars
04Raw body buffer handling to ensure exact payload matching during verification
05Idempotency and event deduplication patterns to prevent duplicate side effects
06Replay attack mitigation with strict timestamp tolerance checks
ユースケース
01Ingesting Stripe, PayPal, or merchant payment callbacks safely without vulnerability to spoofing
02Handling SaaS event subscriptions with immediate acknowledgment and background task queuing
03Processing GitHub webhooks and developer platform event triggers in Next.js App Router