Webhooks

curl -X POST "https://empresa.chainlink.mx/api/v1/webhooks" \
  -H "Authorization: Bearer $CHAINLINK_TOKEN" \
  -H "Accept: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://erp.example.com/chainlink/webhooks",
    "events": [
        "receipt.completed",
        "picking.completed",
        "stock.updated"
    ]
}'

<?php

$client = new \GuzzleHttp\Client();
$response = $client->request('POST', 'https://empresa.chainlink.mx/api/v1/webhooks', [
    'headers' => [
        'Authorization' => 'Bearer ' . getenv('CHAINLINK_TOKEN'),
        'Accept' => 'application/json',
        'Idempotency-Key' => (string) \Ramsey\Uuid\Uuid::uuid4(),
    ],
    'json' => [
        'url' => 'https://erp.example.com/chainlink/webhooks',
        'events' => [
            'receipt.completed',
            'picking.completed',
            'stock.updated',
        ],
    ],
]);

$data = json_decode((string) $response->getBody(), true);

const response = await fetch('https://empresa.chainlink.mx/api/v1/webhooks', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.CHAINLINK_TOKEN}`,
    Accept: 'application/json',
    'Content-Type': 'application/json',
    'Idempotency-Key': crypto.randomUUID(),
  },
  body: JSON.stringify({
      "url": "https://erp.example.com/chainlink/webhooks",
      "events": [
          "receipt.completed",
          "picking.completed",
          "stock.updated"
      ]
  }),
});

const data = await response.json();

import os
import uuid

import requests

response = requests.post(
    "https://empresa.chainlink.mx/api/v1/webhooks",
    headers={
        "Authorization": f"Bearer {os.environ['CHAINLINK_TOKEN']}",
        "Accept": "application/json",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "url": "https://erp.example.com/chainlink/webhooks",
        "events": [
            "receipt.completed",
            "picking.completed",
            "stock.updated"
        ]
    },
)
data = response.json()

{
  "event": "receipt.completed",
  "version": 1,
  "data": { "id": 5531, "status": "finalized", "lines": [ { "item_code": "P-1001", "qty": 48, "batch": "L2610", "serials": [] } ] },
  "timestamp": 1791302400
}

// Laravel: el cuerpo crudo es $request->getContent().
[$t, $v1] = sscanf((string) $request->header('X-Chainlink-Signature'), 't=%d,v1=%s');
$expected = hash_hmac('sha256', $t . '.' . $request->getContent(), env('CHAINLINK_WEBHOOK_SECRET'));

abort_unless($v1 !== null && hash_equals($expected, $v1) && abs(time() - $t) < 300, 401);

$event = json_decode($request->getContent(), true);

// Express: express.raw({ type: 'application/json' }) conserva el cuerpo crudo.
import crypto from 'node:crypto';

app.post('/chainlink/webhooks', express.raw({ type: 'application/json' }), (req, res) => {
  const header = req.get('X-Chainlink-Signature') ?? '';
  const { t, v1 } = Object.fromEntries(header.split(',').map((part) => part.split('=')));
  const expected = crypto
    .createHmac('sha256', process.env.CHAINLINK_WEBHOOK_SECRET)
    .update(`${t}.${req.body}`)
    .digest('hex');

  const valid = v1 && expected.length === v1.length && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
  if (!valid || Math.abs(Date.now() / 1000 - Number(t)) > 300) return res.sendStatus(401);

  const event = JSON.parse(req.body);
  res.sendStatus(200);
  queue.push(event); // Procesamiento posterior a la respuesta.
});

# Flask: request.get_data() es el cuerpo crudo.
import hashlib
import hmac
import os
import time

from flask import abort, request

header = request.headers.get("X-Chainlink-Signature", "")
parts = dict(part.split("=", 1) for part in header.split(","))
t, v1 = parts.get("t", "0"), parts.get("v1", "")
expected = hmac.new(
    os.environ["CHAINLINK_WEBHOOK_SECRET"].encode(),
    f"{t}.".encode() + request.get_data(),
    hashlib.sha256,
).hexdigest()

if not hmac.compare_digest(expected, v1) or abs(time.time() - int(t)) > 300:
    abort(401)

event = request.get_json()