איך מקבלים עדכונים ב-Webhooks ומאמתים חתימה

POST /webhooks/direnium HTTP/1.1
Content-Type: application/json
X-Direnium-Event: voice.call_completed
X-Direnium-Signature: t=<TIMESTAMP>,v1=<SIGNATURE>

{
  "event": "voice.call_completed",
  "data": {
    "callId": "call_3fa8e9d2",
    "direction": "outbound",
    "status": "completed",
    "durationSeconds": 42,
    "summary": "Customer asked to reschedule to Tuesday.",
    "sentiment": "positive"
  },
  "deliveredAt": "<ISO-TIME>"
}

const crypto = require('crypto');

function isFromDirenium(rawBody, signatureHeader, secret) {
  const parts = Object.fromEntries(signatureHeader.split(',').map((part) => part.split('=')));
  const expected = crypto.createHmac('sha256', secret).update(`${parts.t}.${rawBody}`).digest('hex');
  return expected.length === parts.v1.length
    && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1));
}