Hi HymnZ,
Here is a sample, hope it helps you out.
var validateWebhook = function(req) {
var hmacHeader = req.headers['x-shopify-hmac-sha256'];
var digest = '';
try {
digest = crypto.createHmac('sha256', 'WEBHOOK_SIGNKEY_FROM_SHOPIFY_DASHBOARD')
.update(req.rawBody)
.digest('base64');
} catch (e) {
console.log('Errow when creating hmac', e);
}
return hmacHeader == digest;
};
//the middleware parser function to update the request object
function shopifyWebhookBodyParser(req, res, next) {
req.rawBody = '';
req.on('data', function(chunk) {
req.rawBody += chunk.toString('utf8');
});
req.on('end', function() {
req.body = JSON.parse(req.rawBody);
next(req, res);
});
}
//note bodyParser is not active for this url...
app.post("/webhook-receiver-url", function(req, res) {
shopifyWebhookBodyParser(req, res, function(req, res){
if(validateWebhook(req)){
//webhook is valid
}else{
//webhook is not valid..
}
}
});
banned
