Webhooks

curl --request POST \
  --url https://api.smartbills.io/v1/webhooks \
  --header 'Authorization: Bearer VOTRE_CLE_API' \
  --header 'Content-Type: application/json' \
  --header 'x-tenant-id: 123' \
  --data '{
    "url": "https://votre-domaine.com/webhooks/smartbills",
    "events": ["expense.created", "expense_report.approved"],
    "description": "Point d accès webhook de production"
  }'

import { SmartbillsClient } from '@smartbills/sdk';

const client = new SmartbillsClient({
  accessToken: 'VOTRE_CLE_API',
  businessId: 123
});

const webhook = await client.webhooks.create({
  url: 'https://votre-domaine.com/webhooks/smartbills',
  events: ['expense.created', 'expense_report.approved'],
  description: 'Point d accès webhook de production'
});

console.log('ID du webhook :', webhook.id);
console.log('Secret du webhook :', webhook.secret);

from smartbills import SmartbillsClient

client = SmartbillsClient(access_token="VOTRE_CLE_API", business_id=123)

webhook = client.webhooks.create(
    url="https://votre-domaine.com/webhooks/smartbills",
    events=["expense.created", "expense_report.approved"],
    description="Point d accès webhook de production"
)

print(f"ID du webhook : {webhook.id}")
print(f"Secret du webhook : {webhook.secret}")

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, secret) {
  const hmac = crypto.createHmac('sha256', secret);
  const digest = hmac.update(JSON.stringify(payload)).digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(digest)
  );
}

// Dans votre gestionnaire de webhook :
app.post('/webhooks/smartbills', express.json(), (req, res) => {
  const signature = req.headers['x-smartbills-signature'];

  if (!verifyWebhookSignature(req.body, signature, process.env.WEBHOOK_SECRET)) {
    return res.status(401).send('Signature invalide');
  }

  const event = req.body;
  console.log('Événement reçu :', event.type);

  res.status(200).send('OK');
});

import hmac
import hashlib
from flask import Flask, request, jsonify

app = Flask(__name__)

def verify_webhook_signature(payload, signature, secret):
    computed = hmac.new(
        secret.encode(),
        payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(computed, signature)

@app.route('/webhooks/smartbills', methods=['POST'])
def handle_webhook():
    signature = request.headers.get('X-Smartbills-Signature')

    if not verify_webhook_signature(
        request.data.décodé(),
        signature,
        os.environ['WEBHOOK_SECRET']
    ):
        return jsonify({'error': 'Signature invalide'}), 401

    event = request.json
    print(f"Événement reçu : {event['type']}")

    return jsonify({'status': 'succèss'}), 200

curl --request GET \
  --url https://api.smartbills.io/v1/webhooks \
  --header 'Authorization: Bearer VOTRE_CLE_API' \
  --header 'x-tenant-id: 123'

const webhooks = await client.webhooks.list();

webhooks = client.webhooks.list()

curl --request PATCH \
  --url https://api.smartbills.io/v1/webhooks/wh_1234567890 \
  --header 'Authorization: Bearer VOTRE_CLE_API' \
  --header 'Content-Type: application/json' \
  --header 'x-tenant-id: 123' \
  --data '{
    "events": ["expense.created", "expense.updated", "expense_report.approved"]
  }'

await client.webhooks.update('wh_1234567890', {
  events: ['expense.created', 'expense.updated', 'expense_report.approved']
});

client.webhooks.update("wh_1234567890",
    events=["expense.created", "expense.updated", "expense_report.approved"]
)

curl --request DELETE \
  --url https://api.smartbills.io/v1/webhooks/wh_1234567890 \
  --header 'Authorization: Bearer VOTRE_CLE_API' \
  --header 'x-tenant-id: 123'

await client.webhooks.delete('wh_1234567890');

client.webhooks.delete("wh_1234567890")

curl --request POST \
  --url https://api.smartbills.io/v1/webhooks/wh_1234567890/test \
  --header 'Authorization: Bearer VOTRE_CLE_API' \
  --header 'x-tenant-id: 123'

await client.webhooks.test('wh_1234567890');

client.webhooks.test("wh_1234567890")