Webhook Setup

from flask import Flask, request
import hmac
import hashlib

app = Flask(__name__)
WEBHOOK_SECRET = "whsec_your_secret_here"

@app.route("/webhooks/docintel", methods=["POST"])
def handle_webhook():
    # 1. Verify signature
    signature = request.headers.get("X-DocIntell-Signature")
    payload = request.get_data()

    expected = "sha256=" + hmac.new(
        WEBHOOK_SECRET.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(signature, expected):
        return {"error": "Invalid signature"}, 401

    # 2. Process event
    event = request.get_json()

    if event["event"] == "document.processing.completed":
        document_id = event["data"]["document_id"]
        # Queue for async processing
        process_completed_document.delay(document_id)
    elif event["event"] == "document.processing.failed":
        document_id = event["data"]["document_id"]
        error = event["data"]["error_message"]
        handle_failure.delay(document_id, error)

    return {"status": "ok"}, 200

import express from 'express';
import crypto from 'crypto';

const app = express();
const WEBHOOK_SECRET = 'whsec_your_secret_here';

app.post('/webhooks/docintel', express.raw({type: '*/*'}), (req, res) => {
  // 1. Verify signature
  const signature = req.headers['x-docintel-signature'] as string;
  const payload = req.body;

  const expected = 'sha256=' + crypto
    .createHmac('sha256', WEBHOOK_SECRET)
    .update(payload)
    .digest('hex');

  if (!crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected))) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  // 2. Process event
  const event = JSON.parse(payload.toString());

  switch (event.event) {
    case 'document.processing.completed':
      processCompletedDocument(event.data.document_id);
      break;
    case 'document.processing.failed':
      handleFailure(event.data.document_id, event.data.error_message);
      break;
    case 'document.uploaded':
      logUpload(event.data.document_id);
      break;
  }

  res.json({ status: 'ok' });
});