Verify a FaucetPay v2 payout webhook
payout.sent and payout.failed arrive signed. Check the HMAC, dedupe on the event id, and let the webhook correct a payout your send call never heard about.
Tagged “payouts”
12 entries
Idempotency keys on a FaucetPay v2 payout
Generate the key and save it on the claim row before you call send, then reuse it on every retry. Generating it at call time is the same as having none.
Call the FaucetPay v2 API with a scoped key
Bearer auth, JSON POST, and an envelope that is documented one way and returned another on the endpoint you care about most.
Refuse to pay on a stale price
The guard that turns a dead price feed into a delayed payout instead of a wrong one. Fail closed, log loudly, retry later.
Take the median of several price feeds
One API returning a wrong number should not decide what you pay. Three sources and a median makes a single bad quote irrelevant.
Send coin from your own node over JSON-RPC
sendtoaddress against bitcoind, litecoind or dogecoind, with the wallet passphrase handling and the error codes that matter.
Minimum withdrawals and fees, driven by settings
Compute the fee once, show the net before they confirm, and keep every threshold in the settings table so repricing is not a code change.
A payout queue that survives an API that says nothing
Auto-pay when the API answers, hold when it does not, and never refund on a timeout. The three-state queue that keeps a faucet solvent.
Check your FaucetPay balance before you promise a payout
One call that stops the worst failure mode on a faucet: telling a user they were paid when the wallet was already empty.
A withdrawal that cannot be paid twice
Debit on request, not on approval. The state machine that makes double payouts and phantom balances impossible.
Convert USD balances to coin units for a payout
If your ledger is in dollars and your payout API is in satoshi, this is the conversion, with the guard that stops a stale price from emptying your wallet.
Send a FaucetPay payout with the legacy v1 API
The v1 form-POST payout, kept for installs that still run it. New builds should use the v2 scoped-key API, which adds idempotency keys.