Debug webhooks that fail only in the native app
Wrapping a Lovable app with Capacitor led to failing RevenueCat webhooks. The cause was Supabase's own auth check running before the code, which none of the AI tools spotted.
Payments & webhooks
Checkout works but webhooks fail silently. Verify signatures, handle failed and duplicate events, and run one real payment before launch.
4 items · 4 stories · 0 security incidents
Plan auth and payments before the fun part
The product took two days with Cursor, but auth, Stripe and webhook problems took weeks. The poster ends by recommending a boilerplate.
Handle failed payments and duplicate Stripe webhooks
The front end took a weekend, then Stripe webhook bugs, auth edge cases and slow queries took weeks. Note: it was posted by an account named after the starter tool the post ends up promoting.
Fix Stripe webhooks rejected by Supabase auth
On launch day a Supabase function rejected Stripe's webhook because it required a user login token, so a paying customer stayed on the free tier.