DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
A code review finds a webhook handler that verifies the signature correctly but processes the side effect BEFORE checking for a duplicate event ID. What's the actual risk level?
A
No risk — signature verification alone is sufficient protection
B
Real risk remains — signature verification proves the event is AUTHENTIC, but says nothing about whether it's a DUPLICATE delivery of an already-processed event; both checks are needed, and the dedup check must run before the side effect
C
This is only a problem for unsigned webhooks
D
Signature verification automatically implies deduplication
Check Answer