For a service-based booking site, I’d usually confirm the request first
and then process the payment, with webhooks used to keep the booking
status synchronized. Security, idempotency, and verifying webhook
signatures are especially important. The sa...
