Overview

import crypto from 'crypto';
import express from 'express';

const SECRET = process.env.STREAMPIXEL_WEBHOOK_SECRET; // whsec_...
const app = express();

app.post('/webhooks/streampixel', express.raw({ type: 'application/json' }), (req, res) => {
  const header = req.get('X-Streampixel-Signature') || '';
  const { t, v1 } = Object.fromEntries(header.split(',').map((p) => p.split('=')));
  const fresh = Math.abs(Date.now() / 1000 - Number(t)) < 300;
  const expected = crypto.createHmac('sha256', SECRET).update(`${t}.${req.body}`).digest('hex');
  const valid = fresh && v1 && v1.length === expected.length
    && crypto.timingSafeEqual(Buffer.from(v1, 'hex'), Buffer.from(expected, 'hex'));
  if (!valid) return res.status(401).end();

  res.status(200).end();
  const event = JSON.parse(req.body);
  // handle event — de-duplicate on event.eventId
});

const express = require('express');
const app = express();

app.use(express.json());

app.post('/webhooks/streampixel', (req, res) => {
  const { event, projectId, uploadId, objection } = req.body;

  console.log(`Received event: ${event} for project: ${projectId}`);

  switch (event) {
    case 'build.approved':
      console.log(`Build ${uploadId} approved. Triggering deployment...`);
      // Start your deployment pipeline
      break;

    case 'build.rejected':
      console.log(`Build ${uploadId} rejected. Reason: ${objection}`);
      // Notify your team
      break;

    case 'webhook.test':
      console.log('Test webhook received successfully!');
      break;

    default:
      console.log(`Event: ${event}`);
  }

  // Always respond with 200 quickly
  res.status(200).json({ received: true });
});

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});