Integrate PureMail with 7,000+ Apps

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, secret) {
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

// Express.js example
app.post('/webhooks/puremail', (req, res) => {
  const signature = req.headers['x-puremail-signature'];
  const payload = JSON.stringify(req.body);

  if (!verifyWebhookSignature(payload, signature, process.env.WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }

  // Process the webhook
  const { event, data } = req.body;

  if (event === 'job.completed') {
    console.log(`Job ${data.jobId} completed with ${data.validCount} valid emails`);
  }

  res.status(200).send('OK');
});

import hmac
import hashlib

def verify_webhook_signature(payload: str, signature: str, secret: str) -> bool:
    expected_signature = hmac.new(
        secret.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()

    return hmac.compare_digest(signature, expected_signature)

# Flask example
@app.route('/webhooks/puremail', methods=['POST'])
def handle_webhook():
    signature = request.headers.get('X-PureMail-Signature')
    payload = request.get_data(as_text=True)

    if not verify_webhook_signature(payload, signature, os.getenv('WEBHOOK_SECRET')):
        return 'Invalid signature', 401

    data = request.json
    event = data['event']

    if event == 'job.completed':
        print(f"Job {data['data']['jobId']} completed")

    return 'OK', 200