Güçlü Webhook Entegrasyonu

                const express = require('express');
const crypto = require('crypto');
const app = express();

// HMAC için ham gövde gerekir (parse edilmeden ÖNCE)
app.post('/webhook/imzala', express.raw({ type: 'application/json' }), (req, res) => {
  const header = req.headers['x-imzala-signature-256'] || '';
  const expected = 'sha256=' + crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(req.body) // ham gövde (Buffer)
    .digest('hex');

  if (header !== expected) {
    return res.status(401).send('Unauthorized');
  }

  const payload = JSON.parse(req.body);
  const eventType = req.headers['x-imzala-event'];
  const deliveryId = req.headers['x-imzala-delivery']; // idempotency

  switch (eventType) {
    case 'party.signed':
      console.log(`Bir taraf imzaladı: ${payload.data.demand_id}`);
      break;
    case 'demand.completed':
      console.log(`Sözleşme tamamlandı: ${payload.data.demand_id}`);
      break;
  }

  res.status(200).send('OK');
});

              

                {
  "id": "evt_3f9a1234567890",
  "type": "demand.completed",
  "created_at": "2026-06-29T10:30:00.000Z",
  "data": {
    "demand_id": "uuid",
    "status": "COMPLETED",
    "completed_at": "2026-06-29T10:30:00Z",
    "parties": [
      {
        "id": "uuid",
        "name": "Mehmet Yılmaz",
        "email": "[email protected]",
        "signed_at": "2026-06-29T10:29:45Z"
      }
    ]
  }
}