Endpoint smoke test

Lemon Squeezy webhook endpoint smoke test.

Generate a PR-ready endpoint report before blaming checkout, PayPal, or fulfillment. This browser-only tool checks the webhook URL, live/test mode, subscribed events, 2xx response behavior, x-signature gate, duplicate retry handling, and order-to-entitlement routing.

Endpoint evidence

Webhook endpoint URL Deployment target Mode alignment Expected response Subscribed events

The Lemon Squeezy dashboard endpoint URL exactly matches the deployed route. The deployed route accepts POST and does not redirect through auth or middleware. Checkout, variant, store, webhook endpoint, and signing secret are from the same test/live environment. order_created and the required subscription/license events are enabled. The handler verifies x-signature against the exact raw request body before JSON parsing. Duplicate deliveries write one idempotency key and skip later side effects. Paid order metadata maps to the expected user, product, variant, and entitlement.

Private evidence note

Generated report

Readiness0%

Passed gates0/7

Launch stateBlocked