Incoming Messages

{
  "event_type": "incoming_message",
  "event_id": "evt_1nHs82jKla92mzP",
  "timestamp": "2025-04-15T13:42:27Z",
  "data": {
    "conversation_id": "conv_87Hj2k9Lm5",
    "phone_number": "8801734363287",
    "recipient_name": "John Doe",
    "user_id": "6fb11ff2-d9b2-4560-8437-0fe58ec9f4a6",
    "message": {
      "type": "text",
      "content": "How can I use notifier by whatsable api?",
      "timestamp": "2025-04-15T13:42:27Z"
    },
    "conversation_context": {
      "last_user_message": "How can I use notifier by whatsable api?",
      "last_bot_message": "Hello! How can I assist you today?",
      "user_timestamp": 1718470947,
      "bot_timestamp": 1718470865
    },
    "conversation_history": [
      {
        "type": "bot",
        "content": "Hello! How can I assist you today?",
        "timestamp": "2025-04-15T13:41:05Z",
        "content_type": "text"
      },
      {
        "type": "user",
        "content": "How can I use notifier by whatsable api?",
        "timestamp": "2025-04-15T13:42:27Z",
        "content_type": "text"
      }
    ]
  },
  "version": "2025-04-01"
}

curl -X GET \
  https://api.insightssystem.com/api:AFRA_QCy/webhooks \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer YOUR_API_KEY'

curl -X POST \
  https://api.insightssystem.com/api:AFRA_QCy/webhooks \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -d '{
    "url": "https://example.com/webhooks/whatsapp",
    "description": "Production webhook for WhatsApp replies",
    "events": ["incoming_message"]
  }'

const crypto = require('crypto');

function verifyWebhookSignature(requestBody, signatureHeader, webhookSecret) {
  const hmac = crypto.createHmac('sha256', webhookSecret);
  const signature = hmac.update(requestBody).digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature, 'hex'),
    Buffer.from(signatureHeader, 'hex')
  );
}

// Express.js example
app.post('/webhooks/whatsapp', express.raw({type: 'application/json'}), (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  
  if (!signature) {
    return res.status(400).send('No signature header');
  }
  
  const isValid = verifyWebhookSignature(
    req.body.toString(),
    signature,
    'YOUR_WEBHOOK_SECRET'
  );
  
  if (!isValid) {
    return res.status(401).send('Invalid signature');
  }
  
  const payload = JSON.parse(req.body.toString());
  // Process the webhook payload
  
  res.status(200).send('Webhook received');
});

const axios = require('axios');
const fs = require('fs');
const crypto = require('crypto');
const path = require('path');

async function downloadAndVerifyMedia(mediaUrl, expectedSha256) {
  try {
    // Download the file
    const response = await axios({
      method: 'GET',
      url: mediaUrl,
      responseType: 'arraybuffer'
    });
    
    // Calculate SHA-256 hash
    const fileBuffer = Buffer.from(response.data);
    const calculatedHash = crypto
      .createHash('sha256')
      .update(fileBuffer)
      .digest('hex');
    
    // Verify hash
    if (calculatedHash !== expectedSha256) {
      throw new Error('File hash verification failed');
    }
    
    // Save file
    const filename = `media_${Date.now()}${path.extname(mediaUrl)}`;
    fs.writeFileSync(filename, fileBuffer);
    
    return filename;
  } catch (error) {
    console.error('Error downloading media:', error);
    throw error;
  }
}