Webhooks

POST /votre-endpoint HTTP/1.1
Content-Type: application/json
X-Jichio-Event: health.critical
X-Jichio-Delivery-Id: 0d3c9a52-6b1e-4f0a-9a7e-2c1b5d8e4f60
X-Jichio-Signature: sha256=5f2b…

{
  "event": "health.critical",
  "delivery_id": "0d3c9a52-6b1e-4f0a-9a7e-2c1b5d8e4f60",
  "data": {
    "project_id": "3f6c2a1e-…",
    "website_url": "https://www.example.com",
    "http_status": 503,
    "response_time_ms": 10000,
    "checked_at": "2026-10-12T09:30:00+00:00"
  }
}

import { createHmac, timingSafeEqual } from "node:crypto";

export function isValidJichioSignature(rawBody: string, signatureHeader: string, secret: string) {
  const expected = `sha256=${createHmac("sha256", secret).update(rawBody).digest("hex")}`;
  const received = Buffer.from(signatureHeader);
  const computed = Buffer.from(expected);
  return received.length === computed.length && timingSafeEqual(received, computed);
}