4e6467ffb0
- Build complete Next.js CRM for commercial real estate - Add authentication with JWT sessions and role-based access - Add GoHighLevel API integration for contacts, conversations, opportunities - Add AI-powered Control Center with tool calling - Add Setup page with onboarding checklist (/setup) - Add sidebar navigation with Setup menu item - Fix type errors in onboarding API, GHL services, and control center tools - Add Prisma schema with SQLite for local development - Add UI components with clay morphism design system Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
55 lines
1.7 KiB
TypeScript
55 lines
1.7 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { handleGHLWebhook, GHLWebhookPayload } from '@/lib/ghl/webhook-handler';
|
|
import { settingsService } from '@/lib/settings';
|
|
import crypto from 'crypto';
|
|
|
|
// Verify webhook signature from GHL
|
|
async function verifyWebhookSignature(
|
|
body: string,
|
|
signature: string | null,
|
|
secret: string
|
|
): Promise<boolean> {
|
|
if (!signature || !secret) return false;
|
|
|
|
const expectedSignature = crypto
|
|
.createHmac('sha256', secret)
|
|
.update(body)
|
|
.digest('hex');
|
|
|
|
return crypto.timingSafeEqual(
|
|
Buffer.from(signature),
|
|
Buffer.from(expectedSignature)
|
|
);
|
|
}
|
|
|
|
export async function POST(request: NextRequest) {
|
|
try {
|
|
const body = await request.text();
|
|
const signature = request.headers.get('x-ghl-signature');
|
|
|
|
// Optional: Verify signature if webhook secret is configured
|
|
const ghlWebhookSecret = await settingsService.get('ghlWebhookSecret');
|
|
if (ghlWebhookSecret) {
|
|
const isValid = await verifyWebhookSignature(body, signature, ghlWebhookSecret);
|
|
if (!isValid) {
|
|
console.error('[Webhook] Invalid signature');
|
|
return NextResponse.json({ error: 'Invalid signature' }, { status: 401 });
|
|
}
|
|
}
|
|
|
|
const payload: GHLWebhookPayload = JSON.parse(body);
|
|
|
|
const result = await handleGHLWebhook(payload);
|
|
|
|
return NextResponse.json(result);
|
|
} catch (error) {
|
|
console.error('[Webhook] Error:', error);
|
|
return NextResponse.json({ error: 'Webhook processing failed' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
// GHL may send GET requests to verify webhook URL
|
|
export async function GET(request: NextRequest) {
|
|
return NextResponse.json({ status: 'ok', message: 'Webhook endpoint active' });
|
|
}
|