Webhooks

POST /:ns/webhooks
GET  /:ns/webhooks/:id
DELETE /:ns/webhooks/:id

# Create webhook
POST https://apis.do/acme.com/webhooks
{
  "url": "https://your-app.com/webhook",
  "events": ["business.created", "order.completed"],
  "secret": "your-webhook-secret"
}

# Webhook delivery
POST https://your-app.com/webhook
{
  "event": "business.created",
  "data": {
    "id": "biz_123",
    "name": "Acme Inc"
  },
  "timestamp": "2024-11-11T15:30:00Z"
}

import { $ } from 'sdk.do'

const client = $('acme.com')

// Create webhook
const webhook = await client.Webhook.create({
  url: 'https://your-app.com/webhook',
  events: ['business.created', 'order.completed'],
  secret: 'your-webhook-secret'
})

// Event handler
on($.Business.created, async (business) => {
  console.log('New business:', business.name)
})

// Business events
$.Business.created
$.Business.updated
$.Business.deleted

// Order events
$.Order.placed
$.Order.completed
$.Order.cancelled

// User events
$.User.registered
$.User.invited
$.User.deleted

// Payment events
$.Payment.succeeded
$.Payment.failed

import { createHmac } from 'crypto'

function verifyWebhook(payload: string, signature: string, secret: string) {
  const hmac = createHmac('sha256', secret)
  hmac.update(payload)
  const expected = hmac.digest('hex')
  return signature === expected
}

// In your webhook handler
app.post('/webhook', (req, res) => {
  const signature = req.headers['x-webhook-signature']
  const payload = JSON.stringify(req.body)

  if (!verifyWebhook(payload, signature, process.env.WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature')
  }

  // Process webhook
  res.status(200).send('OK')
})