Idempotency and replay protection

Prevent duplicate sends and replayed requests.

Prevent duplicate sends

Every send request should have an `Idempotency-Key`. If your app retries the same request, reusing that key helps prevent the same message being accepted twice.

Replay protection

  • Fresh timestamps are required
  • Nonces must be unique
  • Every request must have a valid signature