Webhooks Overview

const express = require('express');
const crypto = require('crypto');

const app = express();
app.use(express.json());

app.post('/webhooks/replyify', (req, res) => {
  // Verify signature (see Security docs)
  const signature = req.headers['x-replyify-signature'];
  const payload = JSON.stringify(req.body);
  const expectedSig = crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(payload)
    .digest('hex');

  if (signature !== `sha256=${expectedSig}`) {
    return res.status(401).send('Invalid signature');
  }

  // Process the event
  const { event, data } = req.body;

  switch (event) {
    case 'reply.received':
      console.log('New reply:', data.reply_id);
      // Queue for processing
      break;
    case 'reply.sent':
      console.log('Reply sent:', data.reply_id);
      break;
  }

  // Respond immediately
  res.status(200).send('OK');
});

app.listen(3000);

from flask import Flask, request, abort
import hmac
import hashlib
import os

app = Flask(__name__)

@app.route('/webhooks/replyify', methods=['POST'])
def handle_webhook():
    # Verify signature
    signature = request.headers.get('X-Replyify-Signature')
    payload = request.get_data()
    expected_sig = 'sha256=' + hmac.new(
        os.environ['WEBHOOK_SECRET'].encode(),
        payload,
        hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(signature, expected_sig):
        abort(401)

    # Process the event
    data = request.get_json()
    event = data['event']

    if event == 'reply.received':
        print(f"New reply: {data['data']['reply_id']}")
    elif event == 'reply.sent':
        print(f"Reply sent: {data['data']['reply_id']}")

    return 'OK', 200