Payout Webhooks

<?php

function verifyPayoutWebhookSignature($payload, $receivedSignature, $payoutWebhookToken) {
    $computedSignature = hash_hmac('sha256', $payload, $payoutWebhookToken);
    return hash_equals($computedSignature, $receivedSignature);
}

public function handlePayoutWebhook(Request $request) {
    $payload = $request->getContent();
    $receivedSignature = $request->header('Signature');
    $payoutWebhookToken = env('PAYVIOX_PAYOUT_WEBHOOK_TOKEN');

    if (!verifyPayoutWebhookSignature($payload, $receivedSignature, $payoutWebhookToken)) {
        return response()->json(['error' => 'Invalid signature'], 401);
    }

    $data = json_decode($payload, true);

    switch ($data['type']) {
        case 'payout.created':
            $this->markPayoutProcessing($data['order_id']);
            break;
        case 'payout.processing':
            $this->notifyRecipientInTransit($data['order_id']);
            break;
        case 'payout.succeeded':
            $this->confirmPayoutDelivery($data['order_id'], $data);
            break;
        case 'payout.failed':
            $this->handlePayoutFailure($data['order_id'], $data);
            break;
        case 'payout.rejected':
            $this->handlePayoutRejection($data['order_id'], $data);
            break;
    }

    return response()->json(['status' => 'success'], 200);
}

const crypto = require('crypto');

function verifyPayoutWebhookSignature(payload, receivedSignature, payoutWebhookToken) {
    const computedSignature = crypto
        .createHmac('sha256', payoutWebhookToken)
        .update(payload)
        .digest('hex');

    return crypto.timingSafeEqual(
        Buffer.from(computedSignature),
        Buffer.from(receivedSignature)
    );
}

app.post('/api/payout-webhook', express.raw({ type: 'application/json' }), (req, res) => {
    const payload = req.body.toString('utf8');
    const receivedSignature = req.headers['signature'];
    const payoutWebhookToken = process.env.PAYVIOX_PAYOUT_WEBHOOK_TOKEN;

    if (!verifyPayoutWebhookSignature(payload, receivedSignature, payoutWebhookToken)) {
        return res.status(401).json({ error: 'Invalid signature' });
    }

    const data = JSON.parse(payload);

    switch (data.type) {
        case 'payout.created':
            markPayoutProcessing(data.order_id);
            break;
        case 'payout.succeeded':
            confirmPayoutDelivery(data.order_id, data);
            break;
        case 'payout.failed':
            handlePayoutFailure(data.order_id, data);
            break;
        case 'payout.rejected':
            handlePayoutRejection(data.order_id, data);
            break;
    }

    res.json({ status: 'success' });
});

import hmac
import hashlib
import json

def verify_payout_webhook_signature(payload, received_signature, payout_webhook_token):
    computed_signature = hmac.new(
        payout_webhook_token.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(computed_signature, received_signature)

@app.route('/api/payout-webhook', methods=['POST'])
def handle_payout_webhook():
    payload = request.get_data(as_text=True)
    received_signature = request.headers.get('Signature')
    payout_webhook_token = os.environ.get('PAYVIOX_PAYOUT_WEBHOOK_TOKEN')

    if not verify_payout_webhook_signature(payload, received_signature, payout_webhook_token):
        return jsonify({'error': 'Invalid signature'}), 401

    data = json.loads(payload)

    if data['type'] == 'payout.succeeded':
        confirm_payout_delivery(data['order_id'], data)
    elif data['type'] == 'payout.failed':
        handle_payout_failure(data['order_id'], data)
    elif data['type'] == 'payout.rejected':
        handle_payout_rejection(data['order_id'], data)

    return jsonify({'status': 'success'}), 200