Dynamic Delivery

const crypto = require("crypto");

function verifySignature(secret, body, signature) {
  const calculatedSignature = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex")
    .toUpperCase();

  return calculatedSignature === signature.toUpperCase();
}

// Express middleware example
app.use("/webhook", express.raw({ type: "application/json" }));

app.post("/webhook", (req, res) => {
  const signature = req.headers["x-signature"];
  const body = req.body.toString("utf8");

  if (!verifySignature(process.env.WEBHOOK_SECRET, body, signature)) {
    return res.status(401).send("Invalid signature");
  }

  // Process webhook...
});

const express = require("express");
const crypto = require("crypto");
const app = express();

// Important: Use raw body parser for signature verification
app.use("/webhook", express.raw({ type: "application/json" }));

app.post("/webhook", async (req, res) => {
  const signature = req.headers["x-signature"];
  const body = req.body.toString("utf8");

  // Verify signature
  if (!verifySignature(process.env.WEBHOOK_SECRET, body, signature)) {
    return res.status(401).send("Invalid signature");
  }

  // Parse the payload
  const payload = JSON.parse(body);

  // Generate or fetch delivery content based on your logic
  const licenseKey = await generateLicenseKey(
    payload.productId,
    payload.customerId
  );
  const downloadUrl = await createDownloadLink(payload.variantId);

  // Return plain text delivery content
  res.setHeader("Content-Type", "text/plain");
  res
    .status(200)
    .send(
      `License Key: ${licenseKey}\n` +
        `Download: ${downloadUrl}\n` +
        `Valid for: 1 Year\n` +
        `Customer: ${payload.order.customer.email}`
    );
});

function verifySignature(secret, body, signature) {
  const calculatedSignature = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex")
    .toUpperCase();
  return calculatedSignature === signature.toUpperCase();
}

app.listen(3000);