Heinrichstech · CDP Webhook SIG Verify

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://app.heinrichstech.com/v1/cdp/webhook-sig-verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "payload": "{\"id\":\"evt_test\",\"type\":\"checkout.session.completed\"}",
    "provider": "stripe",
    "secret": "whsec_test_secret",
    "signature": "t=1640000000,v1=abc...",
    "timestamp": "1640000000",
    "toleranceSeconds": 300
  }),
});
const data = await res.json();

curl -X POST \
  "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify" \
  -H "Content-Type: application/json" \
  -d '{"payload":"{\"id\":\"evt_test\",\"type\":\"checkout.session.completed\"}","provider":"stripe","secret":"whsec_test_secret","signature":"t=1640000000,v1=abc...","timestamp":"1640000000","toleranceSeconds":300}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "details": {
    "ageSeconds": 14,
    "checkedTolerance": true
  },
  "ok": true,
  "payment": {
    "network": "eip155:8453",
    "payer": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
    "transaction": "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  },
  "provider": "stripe",
  "scheme": "hmac-sha256-stripe",
  "valid": true
}