Webhooks API

curl -X POST https://api.ecoevents.com/api/webhooks \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-domain.com/webhook-handler",
    "events": [
      "event.created",
      "event.updated",
      "attendee.registered",
      "sustainability.goal_achieved"
    ],
    "description": "Production webhook for event notifications",
    "metadata": {
      "environment": "production",
      "team": "events"
    }
  }'

const response = await fetch('https://api.ecoevents.com/api/webhooks', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    url: 'https://your-domain.com/webhook-handler',
    events: [
      'event.created',
      'event.updated',
      'attendee.registered',
      'sustainability.goal_achieved'
    ],
    description: 'Production webhook for event notifications',
    metadata: {
      environment: 'production',
      team: 'events'
    }
  })
});

const webhook = await response.json();
console.log('Webhook secret:', webhook.secret); // Save this securely!

import requests

url = 'https://api.ecoevents.com/api/webhooks'
headers = {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
}
data = {
    'url': 'https://your-domain.com/webhook-handler',
    'events': [
        'event.created',
        'event.updated',
        'attendee.registered',
        'sustainability.goal_achieved'
    ],
    'description': 'Production webhook for event notifications',
    'metadata': {
        'environment': 'production',
        'team': 'events'
    }
}

response = requests.post(url, headers=headers, json=data)
webhook = response.json()
print(f"Webhook secret: {webhook['secret']}")  # Save this securely!

curl -X GET "https://api.ecoevents.com/api/webhooks?active=true" \
  -H "Authorization: Bearer YOUR_API_KEY"

const response = await fetch('https://api.ecoevents.com/api/webhooks?active=true', {
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const data = await response.json();
console.log(data);

import requests

url = 'https://api.ecoevents.com/api/webhooks'
headers = {'Authorization': 'Bearer YOUR_API_KEY'}
params = {'active': True}

response = requests.get(url, headers=headers, params=params)
data = response.json()
print(data)

curl -X DELETE https://api.ecoevents.com/api/webhooks/wh_9m8n7o6p5q4r \
  -H "Authorization: Bearer YOUR_API_KEY"

const response = await fetch('https://api.ecoevents.com/api/webhooks/wh_9m8n7o6p5q4r', {
  method: 'DELETE',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const result = await response.json();
console.log(result);

import requests

url = 'https://api.ecoevents.com/api/webhooks/wh_9m8n7o6p5q4r'
headers = {'Authorization': 'Bearer YOUR_API_KEY'}

response = requests.delete(url, headers=headers)
result = response.json()
print(result)

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, secret) {
  const expectedSignature = 'sha256=' + 
    crypto
      .createHmac('sha256', secret)
      .update(payload)
      .digest('hex');
  
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

// Express.js example
app.post('/webhook-handler', express.raw({ type: 'application/json' }), (req, res) => {
  const signature = req.headers['x-ecoevents-signature'];
  const payload = req.body;
  
  if (!verifyWebhookSignature(payload, signature, process.env.WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }
  
  const event = JSON.parse(payload);
  // Process webhook event
  
  res.status(200).send('OK');
});

import hmac
import hashlib
from flask import Flask, request, abort

app = Flask(__name__)

def verify_webhook_signature(payload, signature, secret):
    expected_signature = 'sha256=' + hmac.new(
        secret.encode('utf-8'),
        payload,
        hashlib.sha256
    ).hexdigest()
    
    return hmac.compare_digest(signature, expected_signature)

@app.route('/webhook-handler', methods=['POST'])
def webhook_handler():
    signature = request.headers.get('X-EcoEvents-Signature')
    payload = request.get_data()
    
    if not verify_webhook_signature(payload, signature, WEBHOOK_SECRET):
        abort(401, 'Invalid signature')
    
    event = request.get_json()
    # Process webhook event
    
    return 'OK', 200