Retries and Exponential Backoff

Strapi will send that webhook twice, so your receiver owns the idempotency key

A dev.to tutorial builds an Express receiver with SHA-256 idempotency keys, four attempts and a dead_letters table. The dedupe holds up, right until you run two copies of it.