From Dev.to
Your Order API Needs More Than an Idempotency Key
An order API can accept an Idempotency-Key header on every request and still create a second order for the same intended purchase. Generate a fresh key after a timeout, and a server that deduplicates...