Receber eventos

const crypto = require('crypto');
const express = require('express');
const app = express();

const TOKEN = process.env.GESTIO_WEBHOOK_TOKEN;

function tokenValido(recebido) {
  if (!recebido) return false;
  const a = Buffer.from(recebido);
  const b = Buffer.from(TOKEN);
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

app.post('/webhooks/gestio', express.json(), async (req, res) => {
  if (!tokenValido(req.get('X-Gestio-Webhook-Token'))) {
    return res.sendStatus(401);
  }

  const envelope = req.body;
  if (envelope.teste) {
    console.log('Envio de teste recebido', envelope.id);
    return res.sendStatus(200);
  }

  // Grave o envelope (ou enfileire) e processe de forma assíncrona
  await filaInterna.publicar(envelope);
  res.sendStatus(200);
});

app.MapPost("/webhooks/gestio", async (HttpRequest request, IConfiguration configuration) =>
{
    var tokenEsperado = configuration["Gestio:WebhookToken"];
    var tokenRecebido = request.Headers["X-Gestio-Webhook-Token"].ToString();

    var tokenValido = CryptographicOperations.FixedTimeEquals(
        Encoding.UTF8.GetBytes(tokenRecebido),
        Encoding.UTF8.GetBytes(tokenEsperado));

    if (!tokenValido)
    {
        return Results.Unauthorized();
    }

    var envelope = await request.ReadFromJsonAsync<JsonElement>();
    if (envelope.TryGetProperty("teste", out var teste) && teste.GetBoolean())
    {
        return Results.Ok();
    }

    // Grave o envelope (ou enfileire) e processe de forma assíncrona
    return Results.Ok();
});