Webhooks

conversation.created
conversation.assigned
conversation.resolved
conversation.reopened
message.created
message.agent_replied
visitor.identified
visitor.attributes_updated
file.uploaded

import { createHmac, timingSafeEqual } from "node:crypto";

function verifyWebhook(rawBody: string, signature: string, secret: string) {
  const parts = Object.fromEntries(
    signature.split(",").map((p) => p.split("="))
  );
  const payload = parts.t + "." + rawBody;
  const expected = createHmac("sha256", secret).update(payload).digest("hex");
  return timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1));
}