Idempotency plays an important role in HTTP. There used to be some violations of idempotency rules in the 2000s. However, those violations should have been long past. I didn’t expect to find out an obvious violation, in Chrome, in 2026, until some duplicated POST requests caused a bug. In this case, we clearly saw in Chrome network panel that one POST was made, but 2 of that POST were logged in our server, where the 1st has status code 499.
A 499 means that the client closed connection — in this case, I believe our gateway received a TCP connection RST. Well, this is not abnormal. It could be the browser refreshed page which the browser would do the reset, or it could be any intermediate network device was down temporarily. It just happens. The abnormal thing is that the non-idempotent POST was resent, which is a violation of HTTP idempotency. Yes, there could be some very old proxy, for example, which did not play nice with HTTP idempotency. In that case, the issue should show relation to some region or ISP