Webhooks

X-IziPay-Signature: sha256=<hex>
X-IziPay-Timestamp: 1731843299

{
  "event": "payment_intent.completed",
  "timestamp": 1731843299,
  "data": { "intentId": "pi_...", "merchantId": "...", ... }
}

import { IziPayClient } from 'izichangepay-sdk';

const event = IziPayClient.validateWebhook(
  rawBody,                                  // Buffer brut, PAS du JSON parsé
  req.headers['x-izipay-signature'],
  process.env.IZIPAY_WEBHOOK_SECRET,
);

async function handleWebhook(event: WebhookEvent) {
  // Persist un "deliveryId" + statut dans votre DB AVANT de traiter
  const eventKey = `${event.type}:${event.data.intentId ?? event.data.payoutId}:${event.timestamp}`;
  const inserted = await db.processedEvents.insertIgnoreDuplicate(eventKey);
  if (!inserted) {
    return; // déjà traité, dédup
  }

  switch (event.type) {
    case 'payment_intent.completed':
      await markOrderPaid(event.data.merchantReference);
      break;
    // ...
  }
}

app.post('/webhooks/izipay', async (req, res) => {
  const event = validateWebhook(...);
  queue.add('process-izipay-event', event);  // job async
  res.json({ received: true });              // ack immédiat
});