Dmytro Galko · open-source tools
Record webhooks once, replay them re-signed
A webhook handler breaks in production and you need the payload that broke it. The provider will send you the next event, not that one. A payload copied out of a log fails signature verification, because every provider signs the raw bytes. webhook-rewind keeps the body as bytes from capture to replay and re-signs it with your own secret.
Every signing scheme is checked against an independent implementation of the verifying side, not against a frozen digest. 30 tests, none of which touch a network.
replay webhook locally, re-sign webhook signature, test Stripe Shopify WhatsApp webhook without provider.
If that is your week and you would rather someone else did it, write to hello@dkautomation.dev or open an issue.