Integration guides

The parts the vendor docs leave out.

How these APIs behave once you leave the sandbox — auth flows, webhooks, idempotency, and the failure modes the vendor docs skip. Every guide ships runnable .NET code.

Validating webhook signatures in ASP.NET Core

Guide

Validating webhook signatures in ASP.NET Core

The raw-body trap that breaks HMAC verification in .NET, why == is a vulnerability, and how three real providers sign — including one that does not.

7 min read