Webhooks

curl -X POST https://api.arquos.eu/api/v2/webhooks \
  -H "Authorization: Bearer arq_agent_VOTRE_JETON" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://erp.exemple.fr/arquos", "events": ["appel.clos", "devis.accepte"] }'

{
  "event": "appel.clos",
  "id": "7a02c798-dc67-412e-8944-15b53f924b52",
  "agency": "99266440-c1e5-404c-9d6f-a7477b865896",
  "equipment": "0065e1df-659e-42e4-aaca-0cd11ba52db4",
  "status": "resolue",
  "occurredAt": "2026-10-10T09:41:12.512Z"
}

import { createHmac, timingSafeEqual } from 'node:crypto';

function signatureValide(entete, corps, secret) {
  const { t, v1 } = Object.fromEntries(entete.split(',').map((p) => p.split('=')));
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const attendue = createHmac('sha256', secret).update(`${t}.${corps}`).digest('hex');
  return attendue.length === v1.length && timingSafeEqual(Buffer.from(attendue), Buffer.from(v1));
}