Webhooks

const express = require('express');
const crypto = require('crypto');
const app = express();

app.use(express.json());

// Webhook endpoint
app.post('/webhooks/amanahagent', (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  const secret = process.env.WEBHOOK_SECRET;
  
  // Verify signature
  if (verifySignature(req.body, signature, secret)) {
    const event = req.body;
    
    console.log('Received event:', event.event);
    console.log('Event data:', event.data);
    
    // Process the event
    handleWebhookEvent(event);
    
    res.status(200).send('OK');
  } else {
    res.status(401).send('Unauthorized');
  }
});

function verifySignature(payload, signature, secret) {
  const hmac = crypto.createHmac('sha256', secret);
  hmac.update(JSON.stringify(payload));
  const calculatedSignature = 'sha256=' + hmac.digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(calculatedSignature)
  );
}

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});

import hmac
import hashlib
import json
from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/webhooks/amanahagent', methods=['POST'])
def webhook_handler():
    signature = request.headers.get('X-Webhook-Signature')
    secret = os.environ.get('WEBHOOK_SECRET')
    
    # Verify signature
    if verify_signature(request.data, signature, secret):
        event = request.json
        
        print(f"Received event: {event['event']}")
        print(f"Event data: {event['data']}")
        
        # Process the event
        handle_webhook_event(event)
        
        return jsonify({'status': 'success'}), 200
    else:
        return jsonify({'error': 'Unauthorized'}), 401

def verify_signature(payload, signature, secret):
    calculated_signature = 'sha256=' + hmac.new(
        secret.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()
    
    return hmac.compare_digest(signature, calculated_signature)

if __name__ == '__main__':
    app.run(host='0.0.0.0', port=3000)