Receive Real-Time Events with FlareHQ Webhooks

import express from 'express';
import { FlareHQ } from '@flarehq/sdk';

const app = express();
const flarehq = new FlareHQ({ apiKey: process.env.FLAREHQ_SECRET_KEY! });

// Use express.raw() — NOT express.json() — to preserve the raw body bytes.
app.post('/webhooks', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = req.headers['x-flarehq-signature'] as string;

  let event;
  try {
    event = flarehq.webhooks.constructEvent(
      req.body,
      sig,
      process.env.FLAREHQ_WEBHOOK_SECRET!
    );
  } catch (err) {
    console.error('Signature verification failed:', err);
    return res.status(400).send('Webhook signature mismatch');
  }

  switch (event.type) {
    case 'payment.settled':
      console.log('Payment settled:', event.data.reference, event.data.amount);
      break;
    case 'payment.auto_settled':
      console.log('Payment auto-settled via CCTP:', event.data.reference);
      break;
    case 'escrow.created':
      console.log('Escrow locked:', event.data.reference);
      break;
    case 'escrow.released':
      console.log('Escrow released:', event.data.reference);
      break;
    case 'escrow.disputed':
      console.log('Escrow disputed:', event.data.reference);
      break;
    case 'dispute.resolved':
      console.log('Dispute resolved:', event.data.reference, event.data.outcome);
      break;
    case 'refund.completed':
      console.log('Refund completed:', event.data.reference);
      break;
    case 'stream.created':
      console.log('Stream started:', event.data.reference);
      break;
    case 'stream.stopped':
      console.log('Stream stopped:', event.data.reference);
      break;
    case 'stream.withdrawn':
      console.log('Stream withdrawal:', event.data.reference, event.data.amountWithdrawn);
      break;
    case 'stream.completed':
      console.log('Stream completed:', event.data.reference, event.data.totalStreamed);
      break;
    case 'payroll.completed':
      console.log('Payroll batch:', event.data.batchRef, event.data.status);
      break;
    default:
      console.log('Unhandled event type:', event.type);
  }

  // Respond 200 immediately — process heavy work asynchronously.
  res.status(200).send({ received: true });
});

import { NextRequest, NextResponse } from 'next/server';
import { FlareHQ } from '@flarehq/sdk';

const flarehq = new FlareHQ({ apiKey: process.env.FLAREHQ_SECRET_KEY! });

export async function POST(req: NextRequest) {
  // req.text() returns the raw body string — do not call req.json() here.
  const payload = await req.text();
  const signature = req.headers.get('x-flarehq-signature')!;

  let event;
  try {
    event = flarehq.webhooks.constructEvent(
      payload,
      signature,
      process.env.FLAREHQ_WEBHOOK_SECRET!
    );
  } catch (err) {
    return NextResponse.json(
      { error: 'Webhook signature verification failed' },
      { status: 400 }
    );
  }

  switch (event.type) {
    case 'payment.settled':
      console.log('Payment confirmed:', event.data.reference, event.data.amount);
      break;
    case 'escrow.created':
      console.log('Escrow initiated:', event.data.reference);
      break;
    case 'escrow.disputed':
      console.log('Dispute opened:', event.data.reference);
      break;
    // Handle other event types...
  }

  return NextResponse.json({ received: true });
}