Engineering posts
Engineering notes from Nestarc Webhooks.
Why @WebhookEmit is a NestJS interceptor, not a controller decorator
The design choices behind @WebhookEmit — how a NestJS interceptor solves the response-capture, serverless-await, and dependency-injection problems that a plain method decorator can't.
· 7 min read
How we sign webhooks: HMAC-SHA256, versioned signatures, and a 24-hour rotation window
Why Nestarc Webhooks signs every delivery with versioned HMAC-SHA256 headers, and how the 24-hour rotation overlap lets receivers swap signing secrets without downtime.
· 6 min read
SDK v0.2 — automatic idempotency keys
WebhookClientService now sends an Idempotency-Key header on every call, eliminating a common source of duplicate events during retries.
· 1 min read