Overview

1. You register a webhook URL in the dashboard
2. An event occurs (e.g., new order placed)
3. DashForDevs sends a POST request to your URL
4. Your server processes the event and responds with 200 OK

{
  "event": "order.created",
  "timestamp": "2025-01-15T10:30:00Z",
  "data": {
    "id": "ord_abc123",
    "order_number": "ORD-1042",
    "status": "pending",
    "total": "77.73",
    "customer": { ... },
    "items": [ ... ]
  }
}

// app/api/webhooks/dash4devs/route.ts
import { NextRequest, NextResponse } from "next/server"
import crypto from "crypto"

const WEBHOOK_SECRET = process.env.DASH4DEVS_WEBHOOK_SECRET!

export async function POST(req: NextRequest) {
  const body = await req.text()
  const signature = req.headers.get("x-dash4devs-signature")

  // Verify the signature
  const expected = crypto
    .createHmac("sha256", WEBHOOK_SECRET)
    .update(body)
    .digest("hex")

  if (signature !== expected) {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 })
  }

  const event = JSON.parse(body)

  switch (event.event) {
    case "order.created":
      // Handle new order
      console.log("New order:", event.data.order_number)
      break
    case "customer.created":
      // Handle new customer
      break
  }

  return NextResponse.json({ received: true })
}