Webhooks

import Fastify from "fastify";
import Cadenya from "@cadenya/cadenya";

// Reads CADENYA_API_KEY and CADENYA_WEBHOOK_SECRET from the environment.
const cadenya = new Cadenya();
const app = Fastify({ logger: true });

// Signature verification needs the bytes Cadenya sent, before JSON parsing.
app.removeContentTypeParser("application/json");
app.addContentTypeParser(
  "application/json",
  { parseAs: "string" },
  (_request, body, done) => done(null, body),
);

app.post<{ Body: string }>("/webhooks/cadenya", async (request, reply) => {
  try {
    const event = await cadenya.webhooks.unwrap(request.body, request.headers);
    console.log(event.type, event.data.objective.id);
  } catch {
    return reply.code(401).send("bad signature");
  }

  return reply.code(200).send();
});

async function start() {
  try {
    await app.listen({ port: 3000 });
  } catch (error) {
    app.log.error(error);
    process.exit(1);
  }
}

void start();

package main

import (
	"io"
	"log"
	"net/http"

	cadenya "go.cadenya.com/cadenya-go"
)

func main() {
	// Reads CADENYA_API_KEY and CADENYA_WEBHOOK_SECRET from the environment.
	client, err := cadenya.NewClient()
	if err != nil {
		log.Fatal(err)
	}

	http.HandleFunc("POST /webhooks/cadenya", func(w http.ResponseWriter, r *http.Request) {
		rawBody, err := io.ReadAll(r.Body)
		if err != nil {
			http.Error(w, "read failed", http.StatusBadRequest)
			return
		}

		event, err := client.Webhooks().Unwrap(rawBody, r.Header)
		if err != nil {
			http.Error(w, "bad signature", http.StatusUnauthorized)
			return
		}

		log.Printf("%s %s", event.Type, event.Data.Objective.ID)
		w.WriteHeader(http.StatusOK)
	})

	log.Fatal(http.ListenAndServe(":3000", nil))
}

# gem install sinatra cadenya
require "sinatra"
require "cadenya"

# Reads CADENYA_API_KEY and CADENYA_WEBHOOK_SECRET from the environment.
client = Cadenya::Client.new

post "/webhooks/cadenya" do
  raw_body = request.body.read
  headers = {
    "webhook-id" => request.env["HTTP_WEBHOOK_ID"],
    "webhook-timestamp" => request.env["HTTP_WEBHOOK_TIMESTAMP"],
    "webhook-signature" => request.env["HTTP_WEBHOOK_SIGNATURE"]
  }

  begin
    event = client.unwrap_webhook(raw_body, headers)
  rescue Cadenya::WebhookVerificationError
    halt 401, "bad signature"
  end

  puts "#{event.type} #{event.data.objective.id}"
  status 200
end