Вебхук подій

MCowBQYDK2VwAyEArbRTkyh3A035YUWWZdyF3vck4QN3I7uU8cp7YaxocFE=

import crypto from "node:crypto";
import express from "express";

const publicKey = crypto.createPublicKey({
  key: Buffer.from("MCowBQYDK2VwAyEArbRTkyh3A035YUWWZdyF3vck4QN3I7uU8cp7YaxocFE=", "base64"),
  format: "der",
  type: "spki",
});

const app = express();
app.post("/erlc-webhook", express.raw({ type: "*/*" }), (req, res) => {
  const timestamp = req.get("X-Signature-Timestamp");
  const signature = req.get("X-Signature-Ed25519");
  if (!timestamp || !signature) return res.sendStatus(401);

  const message = Buffer.concat([Buffer.from(timestamp, "utf8"), req.body]);
  const ok = crypto.verify(null, message, publicKey, Buffer.from(signature, "hex"));
  if (!ok) return res.sendStatus(401);

  const event = JSON.parse(req.body.toString("utf8"));
  res.sendStatus(204);
});