Hono Lemon Squeezy webhook handler
Hono is a good fit for low-cost webhook endpoints when the route is small, explicit, and covered by fixtures.
Open the free generatorRead request text
Use await c.req.text() and verify the x-signature header before parsing the payload.
Use Web Crypto
On Workers-style runtimes, crypto.subtle can compute HMAC SHA-256 without adding a heavy dependency.
Return fast
Acknowledge valid events quickly and move slow billing synchronization into a queue or idempotent background job when needed.
FAQ
Does this work on Cloudflare Workers?
Yes, the same Web Crypto signing helper works in Workers-compatible runtimes.
Should the handler call paid APIs?
No. Keep the webhook route focused on verification and state changes in your own app.
Use the free sample before wiring production checkout
Download a public sample pack with fake Lemon Squeezy fixtures, signature tests, contract checks, duplicate replay tests, and CI skeletons. The Pro Kit preview shows the full paid package structure without exposing the private archive.