Author a webhook integration and signature-verification guide for subscribers in docs/webhook-integration-guide.md

[1nonlypiece]

📌 Description

The backend ships webhook delivery with HMAC signing, timestamp/nonce replay
protection, schema versioning, and a dead-letter store, but there is no
consumer-facing guide explaining how an external integrator should verify
signatures, handle retries, and process events idempotently. docs/webhooks.md
covers the internal design; subscribers need an integration handbook.

This issue authors a subscriber-facing webhook integration guide.

🎯 Requirements and Context

• Document the signature scheme (HMAC algorithm, signed payload, timestamp and
  nonce headers) with a verified pseudocode/example verifier.
• Document retry/backoff behaviour, dead-lettering, and how to use the replay and
  test-ping endpoints.
• Document event schema versioning and content negotiation.
• Include an idempotent-consumer pattern using the delivered event id.

🛠️ Suggested Execution

1. Fork the repo and create a branch

git checkout -b docs/webhook-integration-guide

2. Implement changes

• Author docs/webhook-integration-guide.md, cross-linking docs/webhooks.md.
• Add src/tests/docs.webhookGuide.test.ts asserting the doc exists and documents
  the current signature header names and schema versions (guards against drift).

3. Test and commit

• Run: npm test -- src/tests/docs.webhookGuide.test.ts
• Cover edge cases: header names match implementation, example verifier matches
  the signing algorithm, schema-version list current.

Example commit message

docs: subscriber-facing webhook integration and signature-verification guide

✅ Guidelines

• Minimum 95% test coverage on any helper/assertion code added.
• Doc must match the implemented signing/headers exactly.
• Timeframe: 96 hours.

🏷️ Labels

type-documentation · area-backend · MAYBE REWARDED · GRANTFOX OSS · OFFICIAL CAMPAIGN

💬 Community & Support

• Join the contributor Discord to coordinate, ask questions, and get unblocked fast: https://discord.gg/xvNAvMJf
• Please introduce yourself in the channel before you start so we can avoid duplicate work, pair you with a reviewer, and get your PR merged quickly.
• Maintainers actively triage this channel and aim for fast, clear, respectful reviews — reach out any time you're blocked.

[Ebenezer199914]

i will love to work on this issue

[Shadow-MMN]

@Shadow-MMN has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hey, I have read through the issue. The goal is to create a subscriber-facing webhook integration guide that clearly explains how consumers can securely verify, process, and manage webhook events.

I will author docs/webhook-integration-guide.md, documenting the implemented HMAC signature verification flow, signed payload format, timestamp and nonce headers, replay protection, retry and backoff behavior, dead-letter handling, schema versioning, content negotiation, and an idempotent event-processing pattern using event IDs. I will also cross-reference docs/webhooks.md where appropriate and add a documentation test to ensure the guide stays synchronized with the implemented signature headers and schema versions.

For validation, I will add src/tests/docs.webhookGuide.test.ts to verify that the guide exists and accurately reflects the current implementation, including header names, signature algorithm, and supported schema versions. I will run the targeted documentation test, perform regression checks against the existing webhook implementation to prevent documentation drift, and provide evidence including the updated guide and passing test results demonstrating that the documentation matches the current behavior.

ETA within 1 day.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Shadow-MMN to this issue.

[drips-wave]

Congratulations, @Shadow-MMN! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @Shadow-MMN: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign campaign!

@Shadow-MMN's PR #933 was approved and merged by @1nonlypiece.

🏆 @Shadow-MMN: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (991 total points). Track your full progress on GrantFox.

👏 Great work, @Shadow-MMN! Keep contributing to Disciplr-Org.

[drips-wave]

This issue has been completed by @Shadow-MMN as part of the Stellar Wave Program's 6th Wave 🥳

😎 @Shadow-MMN: You earned 100 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.