Webhooks

{
  "event": "collection.completed",
  "data": {
    "reference": "MZ_COL_20240115_abc123",
    "status": "success",
    "amount": 10000,
    "currency": "UGX",
    "phone": "+256700123456",
    "network": "MTN",
    "fee": 150,
    "net_amount": 9850,
    "completed_at": "2024-01-15T10:32:15Z"
  },
  "timestamp": "2024-01-15T10:32:15Z"
}

const crypto = require("crypto");

app.post("/webhooks/collections", (req, res) => {
  const signature = req.headers["x-marzpay-signature"];
  const payload = JSON.stringify(req.body);

  const expected = crypto
    .createHmac("sha256", process.env.MARZPAY_WEBHOOK_SECRET)
    .update(payload)
    .digest("hex");

  if (signature !== expected) {
    return res.status(401).send("Invalid signature");
  }

  // Process the webhook event
  const { event, data } = req.body;

  if (event === "collection.completed" && data.status === "success") {
    // Fulfill the order
  }

  res.status(200).send("OK");
});