Punctual Webhooks

const crypto = require('crypto');
const express = require('express');
const app = express();

app.use(express.raw({ type: 'application/json' }));

app.post('/webhook', (req, res) => {
  const signature = req.headers['punctual-signature'];
  const payload = req.body;
  
  // Verify webhook signature
  const expectedSignature = crypto
    .createHmac('sha256', process.env.PUNCTUAL_WEBHOOK_SECRET)
    .update(payload)
    .digest('hex');
  
  if (signature !== expectedSignature) {
    return res.status(400).send('Invalid signature');
  }
  
  const event = JSON.parse(payload);
  
  // Handle the event
  switch (event.type) {
    case 'booking.created':
      console.log('New booking:', event.data.object);
      break;
    case 'booking.updated':
      console.log('Booking updated:', event.data.object);
      break;
    case 'booking.cancelled':
      console.log('Booking cancelled:', event.data.object);
      break;
    default:
      console.log('Unhandled event type:', event.type);
  }
  
  res.json({ received: true });
});

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});

import hmac
import hashlib
import json
from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/webhook', methods=['POST'])
def webhook():
    signature = request.headers.get('Punctual-Signature')
    payload = request.get_data()
    
    # Verify webhook signature
    expected_signature = hmac.new(
        bytes(os.environ['PUNCTUAL_WEBHOOK_SECRET'], 'utf-8'),
        payload,
        hashlib.sha256
    ).hexdigest()
    
    if not hmac.compare_digest(signature, expected_signature):
        return jsonify({'error': 'Invalid signature'}), 400
    
    event = json.loads(payload)
    
    # Handle the event
    if event['type'] == 'booking.created':
        print(f"New booking: {event['data']['object']}")
    elif event['type'] == 'booking.updated':
        print(f"Booking updated: {event['data']['object']}")
    elif event['type'] == 'booking.cancelled':
        print(f"Booking cancelled: {event['data']['object']}")
    else:
        print(f"Unhandled event type: {event['type']}")
    
    return jsonify({'received': True})

if __name__ == '__main__':
    app.run(port=3000)

<?php
$webhook_secret = $_ENV['PUNCTUAL_WEBHOOK_SECRET'];
$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_PUNCTUAL_SIGNATURE'];

// Verify webhook signature
$expected_signature = hash_hmac('sha256', $payload, $webhook_secret);

if (!hash_equals($signature, $expected_signature)) {
    http_response_code(400);
    echo json_encode(['error' => 'Invalid signature']);
    exit;
}

$event = json_decode($payload, true);

// Handle the event
switch ($event['type']) {
    case 'booking.created':
        error_log("New booking: " . json_encode($event['data']['object']));
        break;
    case 'booking.updated':
        error_log("Booking updated: " . json_encode($event['data']['object']));
        break;
    case 'booking.cancelled':
        error_log("Booking cancelled: " . json_encode($event['data']['object']));
        break;
    default:
        error_log("Unhandled event type: " . $event['type']);
}

echo json_encode(['received' => true]);
?>