Wanjohi a09ad1e09a fix(billing): read the payload that was actually sent ...

Deliveries arrived intact, verified correctly, and applied to nobody.

Checking the signature here rather than through the SDK means the body is
exactly what was sent, and what is sent is snake_case. The SDK's parser renames
fields to camelCase on the way through, so the reader written against it looked
for `externalId` in a payload that says `external_id` — found nothing, decided
the delivery was about a customer we did not create, and acknowledged it.

That is the worst shape a bug of this kind can take. Every visible signal was
healthy: a 200 back to the provider, no retries, no errors, and a plan that
silently never changed.

Both spellings are now read, so neither path can regress the other.

2026-09-19 01:42:42 +03:00

..

auth

refactor(auth): describe sign-in screens as data, draw them in one place

2026-09-18 00:16:33 +03:00

core

fix(billing): read the payload that was actually sent

2026-09-19 01:42:42 +03:00