Testing Webhooks

import crypto from "node:crypto";
import express from "express";

const app = express();

app.post("/webhook", express.raw({ type: "application/json" }), (req, res) => {
  const rawBody = req.body;
  const signature = req.header("Planck-Signature") ?? "";
  const expected = crypto
    .createHmac("sha256", process.env.PLANCK_WEBHOOK_SECRET)
    .update(rawBody)
    .digest("hex");

  if (
    !/^[0-9a-f]{64}$/i.test(signature) ||
    !crypto.timingSafeEqual(
      Buffer.from(expected, "hex"),
      Buffer.from(signature, "hex")
    )
  ) {
    return res.status(401).send("invalid signature");
  }

  const payload = JSON.parse(rawBody.toString("utf8"));
  console.log({
    requestId: payload.request_id,
    deliveryId: req.header("Planck-Delivery-Id"),
    attempt: req.header("Planck-Delivery-Attempt"),
  });
  return res.status(202).send("accepted");
});

app.listen(8000);

ngrok http 8000