Verifying SendX Webhook

import hmac
import hashlib
from flask import Flask, request, jsonify

app = Flask(__name__)

# Replace with your actual Team API Key
TEAM_API_KEY = "YOUR_TEAM_API_KEY_HERE"

@app.route("/webhook", methods=["POST"])
def verify_webhook():
    raw_body = request.data
    received_sig = request.headers.get("x-sendx-signature", "")
    algo = request.headers.get("x-sendx-signature-alg", "")

    if algo.lower() != "hmac-sha256":
        return jsonify({"error": "unsupported signature algorithm"}), 400

    computed_sig = hmac.new(
        TEAM_API_KEY.encode("utf-8"),
        raw_body,
        hashlib.sha256
    ).hexdigest()

    if hmac.compare_digest(computed_sig, received_sig):
        print("✅ Webhook signature verified successfully!")
        return jsonify({"verified": True}), 200
    else:
        print("❌ Invalid webhook signature!")
        return jsonify({"verified": False}), 400

if __name__ == "__main__":
    app.run(host="0.0.0.0", port=5000)

import express from 'express';
import crypto from 'crypto';

const app = express();

// Use raw body middleware to get exact payload (important!)
app.use(express.raw({ type: 'application/json' }));

const SENDX_API_KEY = 'your_team_api_key_here';

function verifySignature(payload, headerSignature) {
  const computedSignature = crypto
    .createHmac('sha256', SENDX_API_KEY)
    .update(payload)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(computedSignature),
    Buffer.from(headerSignature)
  );
}

app.post('/webhook', (req, res) => {
  const signature = req.headers['x-sendx-signature'];
  const payload = req.body;

  if (!signature) {
    return res.status(400).json({ error: 'Missing signature header' });
  }

  if (!verifySignature(payload, signature)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  const data = JSON.parse(payload);
  console.log('✅ Verified webhook:', data);

  res.status(200).json({ status: 'success' });
});

app.listen(5000, () => console.log('Webhook listener running on port 5000'));