System Design · Senior · Question 33 of 75
Why can't a successful redirect from the payment page be treated as payment confirmation?
- ✓Correct answer: A redirect can be faked; the provider's webhook confirms it
- 2Redirects always arrive before the money is charged
- 3Payment providers don't support redirects back to the site
Explanation
The user may close the tab or open the success URL manually. The source of truth is a server-side webhook from the provider with signature verification, plus a status check via the API. Webhook handling must be idempotent.