Rovela signs every webhook delivery with HMAC-SHA256 in the x-resend-signature header (t=…,v1=…). This article walks through verification step by step, with special attention to three common mistakes: raw body handling, replay protection, and constant-time comparison.
Rovela's scheduled_at field queues email for delivery at a future time, with support for rescheduling and cancellation. This article walks through the full flow and shows how to compute send times in the recipient's time zone.
Retrying after a timeout is the most common cause of duplicate emails. Rovela's idempotency key deduplicates within a 24-hour window — this article covers the rules, how to choose keys, and pairing them with backoff retry.