Webhooks

<?php
  define('CLIENT_SECRET', 'bestshop_secret');

  function verify_webhook($data, $webhook_hmac) {
    $hashed = hash_hmac('sha256', json_encode($data), CLIENT_SECRET, true);
    $compared_hmac = base64_encode($hashed);
    return $webhook_hmac == $compared_hmac;
  }

  $webhook_hmac = $_SERVER['x-goship-hmac-sha256'];
  $data = json_decode(file_get_contents('php://input'), true);
  $verified = verify_webhook($data, $webhook_hmac);

  if ($verified) {
    // Update or insert
  }
?>

  const express = require('express');
  const router = express.Router();
  const { Base64 } = require('js-base64');
  const crypto = require('crypto');
  const client_secret = env.process.client_secret
  const hmac = crypto.createHmac('sha256', client_secret);

  function verify_webhook(data, webhook_hmac) {
    const hashed = hmac.update(JSON.stringify(data));
    const compared_hmac = Base64.fromUint8Array(hashed.digest('hex'));
    return webhook_hmac == compared_hmac;
  }

  // webhook listen route
  router.post('/listen', function (req, res) {
    const webhook_hmac = req.headers['x-goship-hmac-sha256'];
    const data = JSON.parse(req.body);
    const verified = verify_webhook(data, webhook_hmac);

    if (verified) {
      // Update or insert
    }
  });