VerifyAI Webhooks

# 1. Create a webhook endpoint in the VerifyAI dashboard:
#    Settings -> Webhooks -> Add endpoint
#
# 2. Subscribe to events you care about:
#    - verification.completed
#    - verification.flagged
#    - verification.failed
#
# 3. Copy the signing secret. You'll use it to verify incoming payloads.

// Express example
import express from 'express';
import crypto from 'crypto';

const app = express();

app.post(
  '/webhooks/verifyai',
  express.raw({ type: 'application/json' }),
  (req, res) => {
    const signature = req.header('VerifyAI-Signature');
    const expected = crypto
      .createHmac('sha256', process.env.VERIFYAI_WEBHOOK_SECRET)
      .update(req.body)
      .digest('hex');

    if (signature !== expected) {
      return res.status(401).send('Invalid signature');
    }

    const event = JSON.parse(req.body.toString());

    switch (event.type) {
      case 'verification.completed':
        handleCompletion(event.data);
        break;
      case 'verification.flagged':
        handleFlagged(event.data);
        break;
    }

    res.status(200).send('ok');
  }
);