Automations & Webhooks

const crypto = require('crypto');

function verifyWebhook(req, secret) {
  const signature = req.headers['x-peanuts-signature'];
  const payload = JSON.stringify(req.body);
  
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

// Express middleware
app.post('/webhook', (req, res) => {
  const secret = process.env.PEANUTS_WEBHOOK_SECRET;
  
  if (!verifyWebhook(req, secret)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }
  
  // Process the webhook
  const { event, entry, helper } = req.body;
  console.log(`Received ${event} for ${helper.name}`);
  
  res.status(200).json({ received: true });
});

import hmac
import hashlib
from flask import Flask, request, jsonify

app = Flask(__name__)

def verify_webhook(payload, signature, secret):
    expected = hmac.new(
        secret.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(signature, expected)

@app.route('/webhook', methods=['POST'])
def webhook():
    signature = request.headers.get('X-Peanuts-Signature')
    secret = os.environ.get('PEANUTS_WEBHOOK_SECRET')
    
    if not verify_webhook(request.data, signature, secret):
        return jsonify({'error': 'Invalid signature'}), 401
    
    data = request.json
    print(f"Received {data['event']} for {data['helper']['name']}")
    
    return jsonify({'received': True}), 200

<?php
function verifyWebhook($payload, $signature, $secret) {
    $expected = hash_hmac('sha256', $payload, $secret);
    return hash_equals($expected, $signature);
}

$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_PEANUTS_SIGNATURE'] ?? '';
$secret = getenv('PEANUTS_WEBHOOK_SECRET');

if (!verifyWebhook($payload, $signature, $secret)) {
    http_response_code(401);
    echo json_encode(['error' => 'Invalid signature']);
    exit;
}

$data = json_decode($payload, true);
error_log("Received {$data['event']} for {$data['helper']['name']}");

http_response_code(200);
echo json_encode(['received' => true]);