Webhooks

import crypto from 'crypto';
import express from 'express';

const app = express();
const WEBHOOK_SECRET = process.env.SKYAI_WEBHOOK_SECRET;

app.post('/webhooks/skyai', 
  express.raw({ type: 'application/json' }), 
  (req, res) => {
    const signature = req.headers['x-skyai-signature'];
    const [timestamp, receivedSig] = signature.split(',').map(s => s.split('=')[1]);

    // Verify signature
    const signedString = `${timestamp}.${req.body}`;
    const expectedSig = crypto
      .createHmac('sha256', WEBHOOK_SECRET)
      .update(signedString)
      .digest('hex');

    if (expectedSig !== receivedSig) {
      return res.status(401).send('Invalid signature');
    }

    // Verify timestamp (within 5 minutes)
    const now = Math.floor(Date.now() / 1000);
    if (Math.abs(now - parseInt(timestamp)) > 300) {
      return res.status(401).send('Timestamp too old');
    }

    // Handle event
    const event = JSON.parse(req.body);
    console.log('Event received:', event.type);

    switch (event.type) {
      case 'route.completed':
        // Handle routing completion
        break;
      case 'agent.run.completed':
        // Handle agent completion
        break;
      // ... other events
    }

    res.json({ received: true });
  }
);

import hashlib
import hmac
import time
from fastapi import FastAPI, Request, HTTPException

app = FastAPI()
WEBHOOK_SECRET = os.environ["SKYAI_WEBHOOK_SECRET"]

@app.post("/webhooks/skyai")
async def skyai_webhook(request: Request):
    signature = request.headers.get("X-SkyAI-Signature")
    parts = dict(item.split("=") for item in signature.split(","))
    timestamp, received_sig = parts["t"], parts["v1"]

    # Verify signature
    body = await request.body()
    signed_string = f"{timestamp}.{body.decode()}"
    expected_sig = hmac.new(
        WEBHOOK_SECRET.encode(),
        signed_string.encode(),
        hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(expected_sig, received_sig):
        raise HTTPException(status_code=401, detail="Invalid signature")

    # Verify timestamp
    if abs(time.time() - int(timestamp)) > 300:
        raise HTTPException(status_code=401, detail="Timestamp too old")

    # Handle event
    event = await request.json()
    print(f"Event received: {event['type']}")

    if event["type"] == "route.completed":
        # Handle routing completion
        pass
    elif event["type"] == "agent.run.completed":
        # Handle agent completion
        pass

    return {"received": True}