Webhooks

const crypto = require('crypto');

function verifySignature(payload, signature, secret) {
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(payload))
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from('sha256=' + expectedSignature)
  );
}

// V webhook handleri:
app.post('/webhooks/lexi', (req, res) => {
  const signature = req.headers['x-lexi-signature'];
  const secret = process.env.LEXI_WEBHOOK_SECRET;

  if (!verifySignature(req.body, signature, secret)) {
    return res.status(401).send('Invalid signature');
  }

  // Spracovanie webhook udalosti...
  console.log('Event:', req.body.event);
  res.status(200).send('OK');
});