Webhooks

{
  "id": "evt_abc123",
  "type": "order.completed",
  "created_at": "2025-01-15T10:30:00Z",
  "data": {
    "id": "ord_abc123",
    "email": "customer@example.com",
    "product_id": "prod_abc123",
    "product_title": "Premium WordPress Theme",
    "amount": 29.99,
    "currency": "USD",
    "payment_method": "stripe",
    "status": "completed"
  }
}

import crypto from "crypto";

function verifyWebhook(req, signingSecret) {
  const signature = req.headers["x-sellvy-signature"];
  const body = req.rawBody; // raw request body as string

  const expected = crypto
    .createHmac("sha256", signingSecret)
    .update(body)
    .digest("hex");

  if (signature !== expected) {
    throw new Error("Invalid webhook signature");
  }

  return JSON.parse(body);
}

// Express.js example
app.post("/webhooks/sellvy", (req, res) => {
  try {
    const event = verifyWebhook(req, process.env.SELLVY_WEBHOOK_SECRET);

    switch (event.type) {
      case "order.completed":
        console.log("New order:", event.data.id);
        // Handle order...
        break;
      case "order.refunded":
        console.log("Refund:", event.data.id);
        break;
    }

    res.status(200).json({ received: true });
  } catch (err) {
    res.status(400).json({ error: err.message });
  }
});