Webhooks Setup

import express, { Request, Response } from 'express';
import crypto from 'crypto';
import https from 'https';

const app = express();
const PORT = 3000;

const QUILTT_WEBHOOK_SECRET = '<QUILTT_WEBHOOK_SUBSCRIPTION_SECRET>';
const QUILTT_WEBHOOK_VERSION = 1;
const QUILTT_WEBHOOK_WINDOW = 300; // Five minutes

app.use(express.json());

interface WebhookEvent {
  type: string;
  record: any; // Use a more specific type if the structure of record is known
}

app.post('/quiltt_webhook', (req: Request, res: Response) => {
  const timestamp = req.header('Quiltt-Timestamp');
  if (!timestamp || (Date.now() / 1000 - Number(timestamp)) > QUILTT_WEBHOOK_WINDOW) {
    return res.status(204).send();
  }

  const payload = JSON.stringify(req.body);
  const signature = crypto.createHmac('sha256', QUILTT_WEBHOOK_SECRET)
    .update(`${QUILTT_WEBHOOK_VERSION}${timestamp}${payload}`)
    .digest('base64');

  if (req.header('Quiltt-Signature') !== signature) {
    return res.status(204).send();
  }

  const webhook: { events: WebhookEvent[] } = req.body;

  webhook.events.forEach(event => {
    if (event.type.startsWith('connection.synced.successful')) {
      const connection = event.record;
      console.log(`Connection with ID ${connection.id} has synced successfully!`);
      // Additional logic to fetch latest data...
    } else if (event.type === 'account.verified') {
      const account = event.record;
      const account_id = account.id;
      console.log(`Account with ID ${account_id} is ready for payment processing!`);

      const options = {
        hostname: 'api.quiltt.io',
        path: `/v1/accounts/${account_id}/ach_numbers`,
        method: 'GET',
        headers: { Authorization: `Bearer ${process.env.QUILTT_API_KEY_SECRET}` },
      };

      https.get(options, response => {
        // Handle the HTTP response
        // Note: Add error handling and response parsing as needed.
      });
    } else {
      console.log(`Unhandled event ${event.type}`);
    }
  });

  res.status(204).send();
});

app.listen(PORT, () => {
  console.log(`Server running on port ${PORT}`);
});