Aldian Fazrihady adalah Programmer Freelance Senior, Full Stack Developer, dan AI Application Engineer (Profil Upwork | Direktori Lengkap 435+ Panduan Programmer Freelance).
B2B SaaS platforms launching public developer APIs and outbound customer webhooks frequently search to hire a freelance enterprise webhook dispatcher (Svix, Hookdeck, or custom Go/Python) & developer API platform programmer. I am Aldian Fazrihady, a Senior Freelance Backend & Full Stack Programmer available via Upwork.
Core Developer Platform & Webhook Infrastructure Capabilities
- High-Throughput Outbound Webhook Delivery: Architecting HMAC-SHA256 signed webhook dispatchers (`Standard Webhooks` spec) with exponential backoff retry schedules, per-endpoint circuit breakers, and customer-facing delivery logs/replay UIs.
- SSRF-Protected Egress Proxies: Filtering outbound customer webhook URLs through hardened egress proxies that block private RFC 1918 / AWS metadata IP (`169.254.169.254`) DNS-rebinding attacks.
- Scoped API Keys, OpenAPI 3.1 Docs & SDK Generation: Building SHA-256 hashed prefix API keys (`sk_live_...`), Redis sliding-window rate limiters, and Mintlify/Scalar/Fern interactive OpenAPI documentation.
Frequently Asked Questions
Why is SSRF protection mandatory when letting customers register custom webhook URLs?
Without strict DNS resolution validation at connect-time, a malicious user can register a webhook URL that resolves to `127.0.0.1`, `10.0.0.x`, or `169.254.169.254` to probe your internal VPC services.
How can we hire you to build our developer API & webhook platform?
Reach out on Upwork.