Webhooks

<?php
// webhook.php — Mersal event receiver
$payload = json_decode(file_get_contents('php://input'), true);
 
// Validate the secret before trusting the payload
$secret = getenv('MERSAL_WEBHOOK_SECRET');
$signature = $_SERVER['HTTP_X_WEBHOOK_SECRET'] ?? '';
if (!hash_equals($secret, $signature)) {
    http_response_code(401);
    exit;
}
 
switch ($payload['event'] ?? '') {
    case 'message.delivered':
        // Update the message status in your database
        break;
    case 'message.failed':
        // Log the failure or retry on another channel
        break;
    case 'message.reply':
        // Store the reply or route it to your support team
        break;
}
 
http_response_code(200); // Important: reply 200 so Mersal doesn't retry
echo 'ok';

import express from "express";
 
const app = express();
app.use(express.json());
 
app.post("/mersal/webhook", (req, res) => {
  // Validate the secret before trusting the payload
  if (req.headers["x-webhook-secret"] !== process.env.MERSAL_WEBHOOK_SECRET) {
    return res.sendStatus(401);
  }
 
  const { event, number, channel } = req.body;
  switch (event) {
    case "message.delivered":
      // Update the message status in your database
      break;
    case "message.failed":
      // Log the failure or retry on another channel
      break;
    case "message.reply":
      // Store the reply or route it to your support team
      break;
  }
 
  res.sendStatus(200); // Important: reply 200 so Mersal doesn't retry
});
 
app.listen(3000);

import hmac
import os
 
from flask import Flask, request
 
app = Flask(__name__)
 
 
@app.post("/mersal/webhook")
def mersal_webhook():
    # Validate the secret before trusting the payload
    signature = request.headers.get("X-Webhook-Secret", "")
    if not hmac.compare_digest(signature, os.environ["MERSAL_WEBHOOK_SECRET"]):
        return "", 401
 
    payload = request.get_json(silent=True) or {}
    event = payload.get("event")
    if event == "message.delivered":
        pass  # Update the message status in your database
    elif event == "message.failed":
        pass  # Log the failure or retry on another channel
    elif event == "message.reply":
        pass  # Store the reply or route it to your support team
 
    return "ok", 200  # Important: reply 200 so Mersal doesn't retry