express-x-hub

import express from 'express'; import bodyParser from 'body-parser'; const xhub = require('express-x-hub'); const app = express(); const PORT = process.env.PORT || 3000; const XHUB_SECRET = process.env.XHUB_SECRET || 'your-super-secret-key'; if (!XHUB_SECRET || XHUB_SECRET === 'your-super-secret-key') { console.warn('WARNING: XHUB_SECRET is not set or using default. Please set `process.env.XHUB_SECRET` for production.'); } // IMPORTANT: express-x-hub middleware MUST be placed before body-parser app.use(xhub({ algorithm: 'sha1', secret: XHUB_SECRET })); app.use(bodyParser.json()); app.use(bodyParser.urlencoded({ extended: true })); app.post('/webhook', (req, res) => { console.log('Received webhook request.'); // Check if it's an X-Hub request at all if (!req.isXHub) { console.log('Request is not X-Hub.'); return res.status(400).send('No X-Hub Signature Found'); } // Validate the X-Hub signature if (!req.isXHubValid()) { console.warn('Invalid X-Hub Signature!'); return res.status(401).send('Invalid X-Hub Signature'); } // If valid, process the request console.log('X-Hub Signature is valid. Processing request body:', req.body); res.status(200).json({ status: 'X-Hub Is Valid', data: req.body }); }); app.get('/', (req, res) => { res.send('X-Hub test server running. Send POST requests to /webhook'); }); app.listen(PORT, () => { console.log(`Server listening on port ${PORT}`); console.log(`Test with: curl -X POST -H "X-Hub-Signature: sha1=your_test_signature" -H "Content-Type: application/json" -d '{"key":"value"}' http://localhost:${PORT}/webhook`); });