Entrega de webhooks

import { Webhook } from "svix";
import express from "express";

const app = express();
const wh = new Webhook(process.env.CHARGEFY_WEBHOOK_SECRET!); // whsec_...

// IMPORTANTE: use raw body — qualquer re-serialização quebra a assinatura.
app.post(
  "/webhooks/chargefy",
  express.raw({ type: "application/json" }),
  (req, res) => {
    let evt: {
      id: string;
      object: "event";
      type: string;
      organization: string;
      created_at: string;
      livemode: boolean;
      data: { object: unknown; previous_attributes?: Record<string, unknown> };
    };
    try {
      evt = wh.verify(req.body, {
        "webhook-id": req.headers["webhook-id"] as string,
        "webhook-timestamp": req.headers["webhook-timestamp"] as string,
        "webhook-signature": req.headers["webhook-signature"] as string,
      }) as typeof evt;
    } catch {
      return res.status(401).json({ error: "Invalid signature" });
    }

    switch (evt.type) {
      case "payment.intent.succeeded":
        handlePaymentIntentSucceeded(evt.data.object);
        break;
      case "customer.updated":
        handleCustomerUpdated(evt.data.object, evt.data.previous_attributes);
        break;
    }

    res.status(200).json({ received: true });
  },
);

import { NextRequest, NextResponse } from "next/server";
import { Webhook } from "svix";

const wh = new Webhook(process.env.CHARGEFY_WEBHOOK_SECRET!); // whsec_...

export async function POST(req: NextRequest) {
  const body = await req.text(); // raw — não use req.json()
  let evt: {
    id: string;
    object: "event";
    type: string;
    organization: string;
    created_at: string;
    livemode: boolean;
    data: { object: unknown; previous_attributes?: Record<string, unknown> };
  };
  try {
    evt = wh.verify(body, {
      "webhook-id": req.headers.get("webhook-id")!,
      "webhook-timestamp": req.headers.get("webhook-timestamp")!,
      "webhook-signature": req.headers.get("webhook-signature")!,
    }) as typeof evt;
  } catch {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 });
  }

  // ... despacho por evt.type

  return NextResponse.json({ received: true });
}

from svix.webhooks import Webhook, WebhookVerificationError
from flask import Flask, request, jsonify
import os

app = Flask(__name__)
wh = Webhook(os.environ['CHARGEFY_WEBHOOK_SECRET'])  # whsec_...

@app.post('/webhooks/chargefy')
def chargefy_webhook():
    try:
        evt = wh.verify(request.get_data(), dict(request.headers))
    except WebhookVerificationError:
        return jsonify(error='Invalid signature'), 401

    if evt['type'] == 'payment.intent.succeeded':
        # handle...
        pass

    return jsonify(received=True), 200

npm install -g ngrok
ngrok http 3000
# Use a URL https://<sub>.ngrok.io/webhooks/chargefy como endpoint

npm install -g localtunnel
lt --port 3000
# Use a URL gerada como endpoint