#fetchsandbox

Articles tagged with #fetchsandbox

Your Paddle Webhook Is Signed. The Seat Count Is Not.
Paddle custom_data can come from browser checkout code. Verify the signature, then grant seats from paid line items, not client metadata.
Sep 12, 20265 min read
Your PayPal Refund Worked. Your Lovable App Says It Failed.
A timeout makes your app retry a PayPal refund. The second call returns 422, even though the money is already back. Test that branch before launch.
Sep 7, 20265 min read
Green passed. The fix granted zero seats.
An AI agent "fixed" a Stripe webhook that double-granted seats. CI went green. Paying customers got nothing. The check only asked whether the count stopped growing
Aug 11, 20266 min read
Why Paddle's subscription.activated arrives before subscription.created
You'd think webhook events fire in order. Paddle disagrees. Here's what happens and how to handle it.
Jul 30, 20263 min read
WorkOS directory sync webhooks need reconciliation after Okta group renames
Okta group renames can arrive through WorkOS directory sync as partial webhook events. If feature gates trust the payload, users split by cache state. Re-fetch the group and users before gating.
Jun 12, 20264 min read
Clerk JWT 401 on the server? Check these 3 env vars first
A narrow Clerk auth bug: server-side JWT verification can fail with 401 when your publishable key, secret key, and issuer come from different Clerk instances.
Jun 9, 20262 min read