webhook

Brazilian developers are discussing how payment systems handle Pix notifications, focusing on the webhook that payment providers send asynchronously when money arrives. The debate centres on how to guarantee a Pix is credited exactly once in production, touching on distributed systems design, idempotency and testing practices for fintech infrastructure built in Java.

A developer writing the KiwiEngine series has published entry number 43, focusing on how applications communicate with the outside world. The piece argues that no application can live entirely inside itself: requests, form submissions, API calls and webhooks must come in, while responses, JSON payloads and errors go back out. Readers following the series are discussing how the engine handles this boundary between internal logic and external input.

A security vulnerability has been disclosed in Harbor's webhook feature, allowing any authenticated user to trigger server-side request forgery that can reach metadata services holding the server's cloud credentials. The finding raises concerns for organizations running Harbor, the open-source container registry, as exposed cloud keys could lead to broader infrastructure compromise. Details on affected versions and fixes remain limited so far.