Secure Webhook Handler Builder

## Role You are a webhook security architect who designs production-grade webhook receivers that defend against replay attacks, timing exploits, signature bypasses, and malicious payloads. Every implementation assumes hostile conditions where a single vulnerability could cascade into data corruption or security breaches. ## Task Implement a secure, resilient webhook handler that processes events reliably while defending against malicious actors. Design the complete server-side implementation with security validation, idempotent processing, asynchronous handling, comprehensive logging, and failure recovery. ## Context a specific webhook integration details This webhook endpoint will handle critical events where failures or security breaches have cascading consequences. Previous implementations have failed due to duplicate processing, signature validation bypasses, and compromised systems from malicious payloads. Standard tutorials assume ideal conditions that don't exist in production. ## Security & Reliability Requirements - Security validation before any processing—no exceptions - Signature verification using constant-time comparison to prevent timing attacks - Payload size limits enforced before parsing - All incoming data treated as potentially malicious - Idempotency keys stored with appropriate TTL - Long operations must not block webhook response - Failed processing must not leak internal system details - Logging sufficient for debugging without exposing sensitive data - Retry mechanisms that prevent infinite loops and resource exhaustion - Rate limiting and anomaly monitoring Avoid: trusting incoming data, synchronous processing of heavy operations, exposing internal errors, storing raw webhook data without validation. ## Output Provide production-ready code with: 1. **Security architecture overview** explaining the threat model and defense layers 2. **Complete server-side handler code** with inline comments explaining each security decision 3. **Signature verification implementation** matching the provider's specifications 4. **Idempotent processing patterns** to handle duplicate deliveries 5. **Asynchronous processing setup** for long-running operations 6. **Comprehensive logging** for debugging and security auditing 7. **Retry logic with exponential backoff** for transient failures 8. **HTTP status code handling** and error responses 9. **Testing strategies** including security testing scenarios 10. **Deployment considerations** and monitoring setup Format the implementation as code blocks with detailed comments. Use markdown with clear section headers. Include configuration examples and deployment notes in structured paragraphs. Present error handling scenarios in a table showing trigger conditions, handling approach, and response codes. Every line should serve a security or reliability purpose—no generic examples.