Webhooks

{
  "id": "wh_1234567890abcdef",
  "object": "webhook_event",
  "api_version": "2023-12-01",
  "created": 1703123456,
  "data": {
    "object": {
      "id": "pay_9876543210fedcba",
      "object": "payment",
      "amount": 50000,
      "currency": "INR",
      "status": "succeeded",
      "payment_method": "upi",
      "description": "Test payment",
      "metadata": {
        "order_id": "ORD-2023-001"
      }
    }
  },
  "livemode": false,
  "pending_webhooks": 1,
  "request": {
    "id": "req_abcdef1234567890",
    "idempotency_key": null
  },
  "type": "payment.succeeded"
}

const crypto = require('crypto');
const express = require('express');

const app = express();
app.use(express.raw({ type: 'application/json' }));

app.post('/webhook', (req, res) => {
  const sig = req.headers['zenpays-signature'];
  const payload = req.body;
  const endpointSecret = 'whsec_your_webhook_secret';

  let event;

  try {
    const expectedSig = crypto
      .createHmac('sha256', endpointSecret)
      .update(payload, 'utf8')
      .digest('hex');

    if (sig !== expectedSig) {
      console.log('⚠️  Webhook signature verification failed.');
      return res.status(400).send('Webhook Error: Invalid signature');
    }

    event = JSON.parse(payload);
  } catch (err) {
    console.log('⚠️  Webhook payload error:', err.message);
    return res.status(400).send('Webhook Error: ' + err.message);
  }

  // Handle the event
  switch (event.type) {
    case 'payment.succeeded':
      console.log('💰 Payment succeeded:', event.data.object);
      break;
    case 'payment.failed':
      console.log('❌ Payment failed:', event.data.object);
      break;
    default:
      console.log('Unhandled event type:', event.type);
  }

  res.json({ received: true });
});