Handle webhook events

curl -X PUT https://api.dexxify.com/api/v1/webhooks \
  -H "Authorization: Bearer dex_live_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://yourapp.com/webhooks/dexxify" }'

const crypto = require('crypto');

function isValidSignature(rawBody, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

app.post('/webhooks/dexxify', express.raw({ type: '*/*' }), (req, res) => {
  const signature = req.headers['x-dexxify-signature'];
  if (!isValidSignature(req.body, signature, YOUR_WEBHOOK_SECRET)) {
    return res.status(401).end();
  }

  res.status(200).end(); // ack first
  queue.add('dexxify-webhook', JSON.parse(req.body)); // process after
});

GET /webhooks/events
GET /webhooks/events/{id}