Feed Webhooks

curl -X POST "https://app.alana.shopping/api/v1/feeds/google/webhooks" \
  -H "X-API-Key: sk_live_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://yourserver.com/webhooks/alana",
    "events": ["feed.generated", "feed.failed"],
    "secret": "your_webhook_secret"
  }'

const res = await fetch(
  "https://app.alana.shopping/api/v1/feeds/google/webhooks",
  {
    method: "POST",
    headers: {
      "X-API-Key": "sk_live_your_api_key",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      url: "https://yourserver.com/webhooks/alana",
      events: ["feed.generated", "feed.failed"],
      secret: "your_webhook_secret",
    }),
  }
);
const subscription = await res.json();
console.log(subscription.id);

import requests

res = requests.post(
    "https://app.alana.shopping/api/v1/feeds/google/webhooks",
    headers={
        "X-API-Key": "sk_live_your_api_key",
        "Content-Type": "application/json",
    },
    json={
        "url": "https://yourserver.com/webhooks/alana",
        "events": ["feed.generated", "feed.failed"],
        "secret": "your_webhook_secret",
    },
)
subscription = res.json()
print(subscription["id"])

# Signature is sent in the X-Alana-Signature header
# X-Alana-Signature: sha256=abc123...

import crypto from "crypto";

function verifySignature(payload, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(payload, "utf8")
    .digest("hex");
  const received = signature.replace("sha256=", "");
  return crypto.timingSafeEqual(
    Buffer.from(expected, "hex"),
    Buffer.from(received, "hex")
  );
}

// In your webhook handler (Express example):
app.post("/webhooks/alana", (req, res) => {
  const signature = req.headers["x-alana-signature"];
  const isValid = verifySignature(
    JSON.stringify(req.body),
    signature,
    process.env.WEBHOOK_SECRET
  );

  if (!isValid) return res.status(401).send("Invalid signature");

  const { event, platform, product_count } = req.body;
  console.log(`Feed ${event} for ${platform}: ${product_count} products`);
  res.sendStatus(200);
});

import hmac
import hashlib

def verify_signature(payload: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(
        secret.encode(), payload, hashlib.sha256
    ).hexdigest()
    received = signature.replace("sha256=", "")
    return hmac.compare_digest(expected, received)

# Flask example:
from flask import Flask, request, abort
import json

app = Flask(__name__)

@app.post("/webhooks/alana")
def handle_webhook():
    signature = request.headers.get("X-Alana-Signature", "")
    if not verify_signature(request.data, signature, WEBHOOK_SECRET):
        abort(401)

    data = request.json
    print(f"Feed {data['event']} for {data['platform']}")
    return "", 200