Webhook Integration

import crypto from 'crypto';
import express from 'express';

import { DesignTokens, getContainer, getSection } from '@/lib/design-tokens';
const app = express();
const WEBHOOK_SECRET = process.env.WAVE_WEBHOOK_SECRET;

// Use raw body for signature verification
app.post('/webhooks/wave',
  express.raw({ type: 'application/json' }),
  (req, res) => {
    const signature = req.headers['x-wave-signature'];
    const body = req.body.toString('utf8');

    // Compute HMAC-SHA256
    const expectedSignature = crypto
      .createHmac('sha256', WEBHOOK_SECRET)
      .update(body)
      .digest('hex');

    // Compare signatures (constant-time comparison)
    if (!crypto.timingSafeEqual(
      Buffer.from(signature),
      Buffer.from(expectedSignature)
    )) {
      console.error('Invalid signature');
      return res.status(401).send('Invalid signature');
    }

    // Signature valid - parse and process event
    const event = JSON.parse(body);
    console.log('Event received:', event.event);

    switch(event.event) {
      case 'stream.started':
        handleStreamStarted(event);
        break;
      case 'stream.ended':
        handleStreamEnded(event);
        break;
      case 'recording.completed':
        handleRecordingCompleted(event);
        break;
    }

    // Always respond quickly (< 5s)
    res.status(200).send('OK');
  }
);

function handleStreamStarted(event) {
  console.log('Stream started:', event.stream_id);
  // Your business logic here
}

function handleStreamEnded(event) {
  console.log('Stream ended:', event.stream_id);
  console.log('Duration:', event.data.duration, 'seconds');
  // Your business logic here
}

function handleRecordingCompleted(event) {
  console.log('Recording ready:', event.recording_id);
  console.log('Download:', event.data.download_url);
  // Your business logic here
}

app.listen(3000);