Entrega de Webhooks

import { Webhook } from 'svix';
import express from 'express';

const app = express();
const wh = new Webhook(process.env.CHARGEFY_WEBHOOK_SECRET!); // whsec_...

// IMPORTANTE: use raw body — qualquer re-serialização quebra a assinatura.
app.post('/webhooks/chargefy', express.raw({ type: 'application/json' }), (req, res) => {
  let evt: {
    id: string;
    object: 'event';
    type: string;
    organization: string;
    created_at: string;
    livemode: boolean;
    data: { object: unknown; previous_attributes?: Record<string, unknown> };
  };
  try {
    evt = wh.verify(req.body, {
      'webhook-id': req.headers['webhook-id'] as string,
      'webhook-timestamp': req.headers['webhook-timestamp'] as string,
      'webhook-signature': req.headers['webhook-signature'] as string,
    }) as typeof evt;
  } catch {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  switch (evt.type) {
    case 'payment_intent.succeeded':
      handlePaymentIntentSucceeded(evt.data.object);
      break;
    case 'customer.updated':
      handleCustomerUpdated(evt.data.object, evt.data.previous_attributes);
      break;
  }

  res.status(200).json({ received: true });
});

npm install -g ngrok
ngrok http 3000
# Use a URL https://<sub>.ngrok.io/webhooks/chargefy como endpoint