Webhook Documentation

// Node.js verification example
import crypto from "crypto";

function verifyWebhookSignature(
  payload: string,
  signature: string,
  secret: string
): boolean {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(payload)
    .digest("hex");

  return signature === `sha256=${expected}`;
}

// In your webhook handler:
app.post("/webhooks/paymentrescue", (req, res) => {
  const signature = req.headers["x-paymentrescue-signature"];
  const isValid = verifyWebhookSignature(
    JSON.stringify(req.body),
    signature,
    process.env.PAYMENTRESCUE_WEBHOOK_SECRET
  );

  if (!isValid) {
    return res.status(401).json({ error: "Invalid signature" });
  }

  // Process the event
  const event = req.body;
  switch (event.type) {
    case "payment.failed":
      // Add to email recovery campaign
      break;
    case "payment.recovered":
      // Send celebration email, update CRM
      break;
    case "payment_method.updated":
      // Log the update, notify team
      break;
  }

  res.json({ received: true });
});