SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Preventing Duplicate Telegram Webhook Processing in Yii2 With an Idempotent Queue

0
·1 views

A Telegram booking flow can break when a webhook handler runs slow external calls, such as PDF generation or CRM syncs, inside the request lifecycle. Telegram treats slow or failed responses as lost and resends the same update, sometimes for up to 24 hours, which can cause duplicate bookings and notifications. The recommended fix is to split handling into a fast synchronous step that verifies authenticity and drops duplicates, followed by asynchronous processing by queue workers. Yii2's default CSRF protection rejects Telegram's requests, so it should be disabled only on the webhook controller and replaced with verification of the X-Telegram-Bot-Api-Secret-Token header. Requests lacking a valid token should receive a 403 response before the body is parsed, with hash_equals() used to guard the comparison.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer builds offline Python tool using tiny local model to explain Swiss official letters

A developer grew weary of constant AI news and instead built a small private tool to explain Swiss administrative letters, such as payment orders and tax decisions, in plain Italian. Because these documents contain sensitive personal and financial details, the tool runs entirely on the user's machine using gemma3:1b through Ollama, with no API keys, accounts, or uploads. Plain Python code extracts exact figures like amounts and deadlines, while the model only paraphrases the explanation, so it cannot alter those values. The author reports that one run took about 40 seconds on CPU, a speed they consider adequate for this kind of task, though they note results will vary by hardware. They argue that matching a small model to a bounded job, rather than relying on large frontier systems, offers a more practical and less exhausting approach to AI.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Self-Hosting the prompts.chat Prompt Library Behind Traefik and Tailscale

A developer describes deploying f/prompts.chat, the open-source prompt library formerly known as Awesome ChatGPT Prompts, on a private homelab to avoid leaking internal prompts to third-party services. The setup uses Docker Compose with Traefik as a reverse proxy for automatic HTTPS, and restricts access through a Tailscale network with ACL rules and firewall changes that block public exposure. The author reports that concurrent edits caused SQLite lock errors, which were resolved by enabling Write-Ahead Logging, and that an early misconfiguration exposed the Traefik dashboard, which was indexed by Shodan within hours. The post lists performance figures such as sub-80ms warm responses and roughly 235MB combined memory use. It notes the approach is unsuitable for distributed teams without a VPN, multi-region replication, or strict compliance audit needs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Free Browser-Based DodoDeck Offers PDF Editing, Text-to-Speech and File Sharing

A developer has launched DodoDeck, a website offering a collection of free tools that run directly in the browser. The suite includes a PDF text editor, AI-powered text-to-speech, a tool for resizing images to exact kilobyte sizes, and peer-to-peer file sharing of up to 1GB. According to the post, the tools require no sign-up and add no watermarks to output. The announcement was shared on DEV Community as a response to paywalls on simple web tasks. The platform's marketing describes its tools as private and lightweight, though the source provides no independent verification of these claims.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Debugging a Failed Webhook Locally by Capturing, Fixing, and Replaying Requests

A developer explains how to debug a failing webhook without triggering new provider events each time. The walkthrough uses the Hooklistener CLI to tunnel public HTTPS requests to a localhost app on port 3000, or to forward them from an existing Hooklistener endpoint. Developers capture a test delivery, inspect its method, path, headers, and body, then replay it against the fixed handler to confirm the response and side effects. The guide warns that replays keep the original event ID and that signature checks and timestamps can cause failures, so duplicate handling should be tested deliberately. Saving the captured request as a replay case lets developers rerun it after future changes.

0 comments Read more at DEV Community