Webhooks

{
  "id": "evt_abc123",
  "type": "order.created",
  "createdAt": "2025-03-15T18:30:00Z",
  "data": {
    "orderId": "ord_456",
    "cartId": "cart_789",
    "locationId": "loc_123",
    "customerName": "Alex Johnson",
    "customerEmail": "alex@example.com",
    "total": "27.98",
    "currency": "usd",
    "fulfillmentMethod": "delivery",
    "items": [
      {
        "name": "Margherita Pizza",
        "quantity": 2,
        "total": "25.98"
      }
    ]
  }
}

import { createHmac } from 'crypto';

const WEBHOOK_SECRET = process.env.CRAVEUP_WEBHOOK_SECRET!;

export async function POST(request: Request) {
  const body = await request.text();
  const signature = request.headers.get('X-Crave-Signature');

  const expected = createHmac('sha256', WEBHOOK_SECRET)
    .update(body)
    .digest('hex');

  if (signature !== expected) {
    return new Response('Invalid signature', { status: 401 });
  }

  const event = JSON.parse(body);

  switch (event.type) {
    case 'order.created':
      await handleOrderCreated(event.data);
      break;
    case 'order.completed':
      await handleOrderCompleted(event.data);
      break;
  }

  return new Response('OK', { status: 200 });
}

async function handleOrderCreated(data: OrderData) {
  // Check if we already processed this event
  const existing = await db.processedEvents.findUnique({
    where: { eventId: data.orderId },
  });

  if (existing) return; // already processed

  await db.processedEvents.create({
    data: { eventId: data.orderId },
  });

  // Process the order...
}

case 'order.created':
  await sendEmail({
    to: event.data.customerEmail,
    subject: `Order confirmed — ${event.data.locationName}`,
    body: `Your order of ${event.data.items.length} items is being prepared.`,
  });
  break;

case 'order.created':
  await posClient.createOrder({
    externalId: event.data.orderId,
    items: event.data.items,
    total: event.data.total,
  });
  break;

case 'cart.abandoned':
  await analytics.track('cart_abandoned', {
    cartId: event.data.cartId,
    total: event.data.total,
    itemCount: event.data.items.length,
  });
  break;

# Using ngrok
ngrok http 3000

# Then set the webhook URL in the Dashboard to:
# https://abc123.ngrok.io/api/webhooks