JavaScript SDK - Webhooks#

const { data: hook } = await db.webhooks.create({
  name: 'order.created',
  url: 'https://myapp.com/hooks/orders',
  events: ['order.created'],
  secret: 'signing-secret', // used to HMAC-sign deliveries
});

const { data: hooks } = await db.webhooks.list();
await db.webhooks.update(hook.id, { enabled: false });
await db.webhooks.remove(hook.id);

const { data: deliveries } = await db.webhooks.listDeliveries(hook.id);
await db.webhooks.send(hook.id);                    // test delivery
await db.webhooks.retryDelivery(hook.id, deliveryId);

import { createHmac, timingSafeEqual } from 'node:crypto';

function verifyWebhook(rawBody: string, signatureHeader: string, secret: string): boolean {
  const expected = createHmac('sha256', secret).update(rawBody).digest('hex');
  const a = Buffer.from(signatureHeader.replace(/^sha256=/, ''), 'hex');
  const b = Buffer.from(expected, 'hex');
  return a.length === b.length && timingSafeEqual(a, b);
}