Replay Staging Donations

[edacee]

Hi @jiwon85 - Are you able to replay staged donations at 'https://golf-fore-good.replit.app/api/webhooks/everyorg'? The original webhook pointed to an expired Replit development domain and that the new webhook now uses the published Golf Fore Good domain.

If it is not possible to replay the staged transactions, can you clear the currently staged transactions from the donation history?

Thanks again,
Ed

[edacee]

We are struggling to get staging transactions to fire a webhook and send the staged donations back to our app. Our new diagnostic logging distinguishes these cases:

Webhook fires with missing or incorrect authentication: logs an unauthenticated webhook diagnostic, and the endpoint returns 401.
Webhook reaches us but has malformed data: logs a malformed-payload diagnostic.
Authentication succeeds but the Partner Donation ID is unknown: logs a missing-intent diagnostic.
Payload conflicts with the stored amount, currency, or nonprofit: logs a validation-rejected diagnostic.
Unexpected processing/database failure: logs an internal-failure diagnostic and returns 500.
Valid webhook: logs acceptance and reconciles the donation.
Repeated Charge ID: logs/handles it idempotently without counting the donation twice.

Because the current deployment logs contain none of these diagnostics—and no webhook-route 401 or 500—the request did not reach the application at all. If Every.org had fired the webhook and merely used the wrong authentication, the new logging should show that explicitly.

Every request that reaches POST /api/webhooks/everyorg generates exactly one everyorg_webhook_attempt log before returning a response, including:

Missing or incorrect token → reason: "authentication_failed" and HTTP 401
Missing server configuration → reason: "configuration_missing" and HTTP 503
Invalid payload → reason: "payload_invalid"
Valid callback → reconciliation result

There is also a unit test specifically confirming that both a wrong token and a missing token emit one authentication_failed diagnostic without exposing credentials.

[jiwon85]

Hi @edacee ! Could you reach out to us at support@every.org? I'll be able to better help you there.