Does this support HitPay Sandbox testing?

Absolutely. It includes specific IP allowlisting and configuration details for both HitPay production and sandbox environments.

Why is signature verification necessary for webhooks?

Signature verification ensures that the webhook payload actually came from HitPay and hasn't been tampered with or spoofed by a third party.

How does this skill verify HitPay webhooks?

It implements HMAC-SHA256 signature verification by comparing the 'Hitpay-Signature' header against a hash of the raw request body using your secret salt.

Does it handle duplicate webhook notifications?

Yes, the skill includes implementation guidance for idempotent processing to ensure each payment event is only handled once.

Which web frameworks are supported?

The skill provides optimized code examples for Next.js App Router, Express.js, and reusable TypeScript utility functions.

HitPay Webhook Handler

Name: HitPay Webhook Handler
Author: hit-pay

byhit-pay

0•

E-commerce Solutions

Implements secure HitPay payment webhook processing with automated signature verification and event-driven logic.

The HitPay Webhook Handler skill empowers Claude to build and secure payment notification endpoints for HitPay integrations. It provides standardized patterns for HMAC-SHA256 signature verification, IP allowlisting, and idempotent event processing across modern frameworks like Next.js and Express.js. By utilizing this skill, developers can ensure their e-commerce platforms accurately reflect payment statuses (completed, failed, or pending) while maintaining high security standards against spoofing and timing attacks. It is specifically designed for developers building SEA-focused payment solutions who need reliable, production-ready webhook handlers.

Key Features

01HMAC-SHA256 signature verification for HitPay v2 headers

020 GitHub stars

03Comprehensive mapping of HitPay event types including charges and payouts

04Production and Sandbox IP allowlisting for enhanced security

05Framework-specific implementations for Next.js and Express.js

06Idempotent processing patterns to prevent duplicate order fulfillment

Use Cases

01Securing payment endpoints to prevent unauthorized order status changes

02Automating real-time order fulfillment upon successful HitPay transactions

03Debugging and testing webhook delivery using standardized log patterns

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hit-pay/claude-code-plugin webhook-handler

For use in Claude.ai and ChatGPT

Key Features

01HMAC-SHA256 signature verification for HitPay v2 headers

020 GitHub stars

03Comprehensive mapping of HitPay event types including charges and payouts

04Production and Sandbox IP allowlisting for enhanced security

05Framework-specific implementations for Next.js and Express.js

06Idempotent processing patterns to prevent duplicate order fulfillment

Use Cases

01Securing payment endpoints to prevent unauthorized order status changes

02Automating real-time order fulfillment upon successful HitPay transactions

03Debugging and testing webhook delivery using standardized log patterns

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hit-pay/claude-code-plugin webhook-handler

For use in Claude.ai and ChatGPT