Clerk, Webhooks, and Svix — A Story You'll Never Forget

I’ve got a website. It’s connected to Clerk for authentication. One day, my website tells Clerk: "Hey Clerk, if you ever create a new user, send me a messenger and tell me about it." Clerk’s like: "Sure thing. Just give me the address to your office (your deployed site’s URL), and I’ll send the messenger there." But my website is still in development, running on localhost: “Hmm... Can you just send the guy to my house instead (localhost)?” Clerk responds: “Nah... I can’t reach houses. I only send messengers to real offices on the internet.” So my website’s like: “No worries. I’ll call a taxi (ngrok/localtunnel), and they’ll bring your messenger from your office to my house, and return them back.” Now, things are cool… until the paranoia hits. My website suddenly realizes: “Wait a minute... What if some random guy pretends to be from Clerk? What if he tells me something like ‘You owe $1 billion in fake user debt?’

Apr 7, 2025 - 19:36
 0
Clerk, Webhooks, and Svix — A Story You'll Never Forget

I’ve got a website. It’s connected to Clerk for authentication.

One day, my website tells Clerk:

"Hey Clerk, if you ever create a new user, send me a messenger and tell me about it."

Clerk’s like:

"Sure thing. Just give me the address to your office (your deployed site’s URL), and I’ll send the messenger there."

But my website is still in development, running on localhost:

“Hmm... Can you just send the guy to my house instead (localhost)?”

Clerk responds:

“Nah... I can’t reach houses. I only send messengers to real offices on the internet.”

So my website’s like:

“No worries. I’ll call a taxi (ngrok/localtunnel), and they’ll bring your messenger from your office to my house, and return them back.”

Now, things are cool… until the paranoia hits.

My website suddenly realizes:

“Wait a minute... What if some random guy pretends to be from Clerk? What if he tells me something like ‘You owe $1 billion in fake user debt?’