Получение уведомлений

from flask import Flask, request, abort

app = Flask(__name__)

@app.post("/webhook")
def webhook():
    # 1. Сначала проверьте подпись над сырым телом
    body = request.get_data()
    signature = request.headers.get("X-Webhook-Signature", "")
    if not verify_webhook(body, signature, PUBLIC_KEY_B64):
        abort(401)

    # 2. Только теперь парсите JSON и кладите в очередь
    event = request.get_json()
    queue.publish(event)

    # 3. Возвращайте 200 как можно быстрее
    return "", 200

import express from "express";

const app = express();

// ВАЖНО: raw-тело нужно для верификации подписи
app.use("/webhook", express.raw({ type: "application/json" }));

app.post("/webhook", (req, res) => {
  const signature = req.headers["x-webhook-signature"];
  if (!verifyWebhook(req.body, signature, PUBLIC_KEY_B64)) {
    return res.sendStatus(401);
  }
  const event = JSON.parse(req.body.toString("utf8"));
  queue.publish(event);
  res.sendStatus(200);
});

func webhookHandler(w http.ResponseWriter, r *http.Request) {
    body, err := io.ReadAll(io.LimitReader(r.Body, 1<<20))
    if err != nil {
        http.Error(w, "read", http.StatusBadRequest)
        return
    }
    sig := r.Header.Get("X-Webhook-Signature")
    if !verifyWebhook(body, sig, publicKeyB64) {
        http.Error(w, "invalid signature", http.StatusUnauthorized)
        return
    }
    var event WebhookPayload
    if err := json.Unmarshal(body, &event); err != nil {
        http.Error(w, "json", http.StatusBadRequest)
        return
    }
    queue.Publish(event)
    w.WriteHeader(http.StatusOK)
}