Webhooks Integration

import crypto from 'crypto';
import { Request, Response } from 'express';

export function handleWebhook(req: Request, res: Response) {
  const signature = req.headers['x-signature'] as string;
  const secret = process.env.EXTRA_SCOOP_WEBHOOK_SECRET!;
  
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(req.body))
    .digest('hex');

  const isValid = crypto.timingSafeEqual(
    Buffer.from(signature || '', 'hex'),
    Buffer.from(expectedSignature, 'hex')
  );

  if (!isValid) {
    return res.status(401).send('Invalid signature');
  }

  const event = req.body;
  console.log(`Received verified event: ${event.event_type}`);
  res.status(200).json({ received: true });
}

import hmac
import hashlib
import os
from flask import Flask, request, jsonify

app = Flask(__name__)
WEBHOOK_SECRET = os.environ.get('EXTRA_SCOOP_WEBHOOK_SECRET', '').encode('utf-8')

@app.route('/webhooks/extrascoop', methods=['POST'])
def receive_webhook():
    signature = request.headers.get('X-Signature', '')
    raw_payload = request.get_data()

    computed_sig = hmac.new(WEBHOOK_SECRET, raw_payload, hashlib.sha256).hexdigest()

    if not hmac.compare_digest(signature, computed_sig):
        return jsonify({"error": "Unauthorized: Signature mismatch"}), 401

    data = request.json
    print(f"Verified event received: {data.get('event_type')}")
    return jsonify({"received": True}), 200