Receive signed events
A Node.js 24 starter that verifies incoming bytes before processing a JSON event. It combines HMAC-SHA256 signatures, timestamps, unique identifiers and bounded limits. A local sender, private secret generator and tests are included.
Scope
Deduplication lives in memory in one process. Business processing, durable storage and production HTTPS configuration must be added. This starter does not guarantee exactly-once execution.
Included capabilities
- Raw-byte signature verification
- Timestamp window and unique event IDs
- Bounded replay and rate tables
- Local example sender
- English/French guides and tests
Licence and getting started
Original code under the MIT licence, copyright 2026 STELLARR STUDIO. Personal and commercial use permitted with the licence notice retained. French and English guides included. Trademarks and dependencies retain their own rights.
Read the README for requirements, start commands, tests and deployment limits. Hosting, compute, external APIs and bespoke support are not included.
Included files
.gitignorecreate-secret.mjskit.jsonLICENSEpackage.jsonREADME.en.mdREADME.mdreceiver.mjsreceiver.test.mjssend-example.mjsTHIRD_PARTY_NOTICES.md