Andoriña · Puente WhatsApp

import hmac, hashlib
from fastapi import FastAPI, Header, HTTPException, Request

app = FastAPI()
SHARED_SECRET = b"internal_webhook_secret_key"

@app.post("/webhook/order")
async def handle_order(request: Request, x_signature: str = Header(None)):
    body = await request.body()
    computed = hmac.new(SHARED_SECRET, body, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(computed, x_signature or ""):
        raise HTTPException(status_code=401, detail="Firma de webhook invalida")
    payload = await request.json()
    await queue_message(payload["id"], payload["total"])
    return {"status": "dispatched", "order_id": payload["id"]}