Serverless-обработка вебхуков на вашем домене

export async function handler(event) {
  const rawBody = event.body ?? '';
  // Stripe signs raw bytes — never parse before verifying
  if (!stripe.webhooks.verifySignature(rawBody, event.headers['stripe-signature'], process.env.STRIPE_WEBHOOK_SECRET)) {
    return { statusCode: 400, body: 'invalid signature' };
  }
  const evt = JSON.parse(rawBody);
  // Store evt.id before side effects to guard against duplicate delivery
  await db.upsertWebhookEvent(evt.id, evt.type);
  await enqueueFulfillment(evt.id, evt.type, evt.data.object);
  return { statusCode: 200, body: 'ok' };
}

import { createHmac, timingSafeEqual } from 'node:crypto';

export async function handler(event) {
  const body = event.body ?? '';
  const sigHeader = (event.headers['x-hub-signature-256'] ?? '').replace('sha256=', '');
  const expected = createHmac('sha256', process.env.GITHUB_WEBHOOK_SECRET).update(body).digest('hex');
  if (!timingSafeEqual(Buffer.from(sigHeader, 'hex'), Buffer.from(expected, 'hex'))) {
    return { statusCode: 401, body: 'invalid signature' };
  }
  const eventType = event.headers['x-github-event'];
  const payload = JSON.parse(body);
  if (eventType === 'push') await enqueueIndexing(payload.repository.full_name, payload.after);
  else if (eventType === 'pull_request') await enqueuePrWork(payload);
  return { statusCode: 200, body: 'accepted' };
}

export async function handler(event) {
  const params = new URLSearchParams(event.body ?? '');
  // Slack slash commands must respond within 3 seconds —
  // kick off the slow work in a pipeline job, return immediately
  await enqueueSlackWork({
    command: params.get('command'),
    userId: params.get('user_id'),
    channelId: params.get('channel_id'),
    text: params.get('text'),
    responseUrl: params.get('response_url'),
  });
  return { statusCode: 200, body: '' };
}