So I packaged it into a starter that wires these end-to-end:
Google/GitHub OAuth (no passwords)
Spring Security + RBAC (USER/ADMIN)
Stripe Checkout + webhooks → subscription status sync
User app + separate admin app
Docker Compose (MySQL + Redis) + setup/deploy docs
I’d love feedback on webhook idempotency/retry patterns in Spring, and JWT vs session tradeoffs.
ok but...does it call home? or do I get everything in the zip?