Webhooks

import { Postbox } from "@postbox/sdk";

const pb = new Postbox({
  apiKey: process.env.PB_KEY!,
  projectId: process.env.PROJECT_ID!,
});

const webhook = await pb.webhooks.create({
  url: "https://acme.com/hooks/postbox",
  events: ["message.received", "message.bounced"],
});

import os
from postbox import Postbox

pb = Postbox(api_key=os.environ["PB_KEY"], project_id=os.environ["PROJECT_ID"])

webhook = pb.webhooks.create(
    {
        "url": "https://acme.com/hooks/postbox",
        "events": ["message.received", "message.bounced"],
    }
)

using Postbox;

var pb = new PostboxClient(
    new PostboxOptions
    {
        ApiKey = Environment.GetEnvironmentVariable("PB_KEY")!,
        ProjectId = Environment.GetEnvironmentVariable("PROJECT_ID")!,
    }
);

var webhook = await pb.Webhooks.CreateAsync(
    new WebhooksCreateBody
    {
        Url = "https://acme.com/hooks/postbox",
        Events = new List<string> { "message.received", "message.bounced" },
    }
);

import cloud.postboxapp.*;
import cloud.postboxapp.gen.*;
import java.util.*;

Postbox pb = new Postbox(PostboxOptions.builder().apiKey(System.getenv("PB_KEY")).projectId(System.getenv("PROJECT_ID")).build());

var webhook = pb.webhooks.create(
    WebhooksCreateBody.builder()
        .url("https://acme.com/hooks/postbox")
        .events(List.of("message.received", "message.bounced"))
        .build());

import postbox "github.com/postboxapp/postbox-go"

pb, err := postbox.New(postbox.Options{APIKey: os.Getenv("PB_KEY"), ProjectID: os.Getenv("PROJECT_ID")})
ctx := context.Background()

webhook, err := pb.Webhooks.Create(ctx, &postbox.WebhooksCreateBody{
    Url:    "https://acme.com/hooks/postbox",
    Events: []string{"message.received", "message.bounced"},
})

curl -X POST https://api.postboxapp.cloud/v1/webhooks \
  -H "Authorization: Bearer $PB_KEY" \
  -H "X-Project-Id: $PROJECT_ID" \
  -H "Content-Type: application/json" \
  -d '{
        "url": "https://acme.com/hooks/postbox",
        "events": ["message.received", "message.bounced"]
      }'

import express from "express";
import { verifyWebhook } from "@postbox/sdk";

app.post(
  "/hooks/postbox",
  express.raw({ type: "application/json" }),
  (req, res) => {
    try {
      const event = verifyWebhook(
        req.body, // the raw Buffer, not a parsed object
        req.header("X-Postbox-Signature"),
        req.header("X-Postbox-Timestamp"),
        process.env.POSTBOX_WEBHOOK_SECRET!,
      );
      // handle event.type ...
      res.sendStatus(204);
    } catch {
      res.status(400).send("invalid signature");
    }
  },
);

import crypto from "node:crypto";

function verify(
  rawBody: string,
  signature: string,
  timestamp: string,
  secret: string,
) {
  const age = Math.abs(Date.now() / 1000 - Number(timestamp));
  if (!Number.isFinite(age) || age > 300) return false;

  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

  const a = Buffer.from(expected, "utf8");
  const b = Buffer.from(signature, "utf8");
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

const deliveries = await pb.webhooks.listDeliveries(webhookId);

deliveries = pb.webhooks.list_deliveries(webhook_id)

var deliveries = await pb.Webhooks.ListDeliveriesAsync(webhookId);

var deliveries = pb.webhooks.listDeliveries(webhookId);

deliveries, err := pb.Webhooks.ListDeliveries(ctx, webhookID)

curl https://api.postboxapp.cloud/v1/webhooks/$WEBHOOK_ID/deliveries \
  -H "Authorization: Bearer $PB_KEY" -H "X-Project-Id: $PROJECT_ID"