Processing Webhook Events

{
  "id": "event_123",
  "event": "integrated_account:active",
  "payload": {
    "id": "account_456",
    "integration": "shiphero",
    "tenant_id": "customer_789"
  },
  "environment_id": "env_123",
  "created_at": "2024-01-15T10:30:00Z",
  "webhook_id": "webhook_456"
}

const crypto = require('crypto');

function verifySignature(body, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(body, 'utf8')
    .digest('base64url');

  return crypto.timingSafeEquals(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// In your Express handler
app.post('/webhooks/handled', express.raw({type: 'application/json'}), (req, res) => {
  const signature = req.headers['x-handled-signature'];

  if (!verifySignature(req.body, signature, WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }

  const event = JSON.parse(req.body);

  // Process the event based on type
  switch (event.event) {
    case 'integrated_account:active':
      handleAccountActive(event.payload);
      break;
    case 'sync_job_run:completed':
      handleSyncComplete(event.payload);
      break;
    // Handle other events...
  }

  res.status(200).send('OK');
});