{timestamp}.{JSON body}

const crypto = require('crypto');

function verifySignature(req, clientAuthKey) {
  const signature = req.headers['x-docora-signature'];
  const timestamp = req.headers['x-docora-timestamp'];

  // Check timestamp (5 minute window)
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) {
    return false;
  }

  // Reconstruct signed payload
  const payload = `${timestamp}.${JSON.stringify(req.body)}`;

  // Compute expected signature
  const expected = 'sha256=' + crypto
    .createHmac('sha256', clientAuthKey)
    .update(payload)
    .digest('hex');

  // Constant-time comparison
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

{
  "repository": {
    "repository_id": "repo_abc123def456",
    "github_url": "https://github.com/owner/repo",
    "owner": "owner",
    "name": "repo"
  },
  "file": {
    "path": "src/index.ts",
    "sha": "a1b2c3d4e5f6...",
    "size": 1234,
    "content": "import express from 'express';\n..."
  },
  "commit_sha": "abc123def456789...",
  "timestamp": "2025-01-11T12:00:00.000Z"
}

{
  "repository": {
    "repository_id": "repo_abc123def456",
    "github_url": "https://github.com/owner/repo",
    "owner": "owner",
    "name": "repo"
  },
  "file": {
    "path": "src/index.ts",
    "sha": "new_sha_abc123...",
    "size": 2048,
    "content": "import express from 'express';\n// Updated content..."
  },
  "previous_sha": "old_sha_xyz789...",
  "commit_sha": "abc123def456789...",
  "timestamp": "2025-01-11T12:00:00.000Z"
}

{
  "repository": {
    "repository_id": "repo_abc123def456",
    "github_url": "https://github.com/owner/repo",
    "owner": "owner",
    "name": "repo"
  },
  "file": {
    "path": "src/deleted-file.ts",
    "sha": "last_known_sha..."
  },
  "commit_sha": "abc123def456789...",
  "timestamp": "2025-01-11T12:00:00.000Z"
}

{
  "event": "sync_failed",
  "repository": {
    "repository_id": "repo_abc123",
    "github_url": "https://github.com/owner/repo",
    "owner": "owner",
    "name": "repo"
  },
  "error": {
    "type": "git_failure",
    "message": "Authentication failed for 'https://github.com/owner/repo.git'"
  },
  "circuit_breaker": {
    "status": "open",
    "consecutive_failures": 5,
    "threshold": 5,
    "cooldown_until": "2024-01-15T12:30:00.000Z"
  },
  "retry_count": 3,
  "timestamp": "2024-01-15T12:00:00.000Z"
}

{
  "file": {
    "path": "assets/logo.png",
    "sha": "abc123...",
    "size": 50000,
    "content": "iVBORw0KGgoAAAANSUhEUgAA...",
    "content_encoding": "base64"
  }
}

{
  "repository": { "..." : "..." },
  "file": {
    "path": "assets/video.mp4",
    "sha": "abc123...",
    "size": 5242880,
    "content": "<base64 encoded chunk>",
    "content_encoding": "base64",
    "chunk": {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "index": 0,
      "total": 10
    }
  },
  "commit_sha": "...",
  "timestamp": "..."
}

const transfers = new Map();

function handleWebhook(payload) {
  if (!payload.file.chunk) {
    // Non-chunked file
    return processFile(payload.file);
  }

  const { id, index, total } = payload.file.chunk;

  if (!transfers.has(id)) {
    transfers.set(id, {
      chunks: new Array(total),
      received: 0,
      total,
      timeout: setTimeout(() => transfers.delete(id), 5 * 60 * 1000)
    });
  }

  const transfer = transfers.get(id);
  transfer.chunks[index] = payload.file.content;
  transfer.received++;

  if (transfer.received === transfer.total) {
    clearTimeout(transfer.timeout);
    const fullBase64 = transfer.chunks.join('');
    const binary = Buffer.from(fullBase64, 'base64');
    transfers.delete(id);
    return processFile({ ...payload.file, content: binary });
  }
}

app.post('/create', async (req, res) => {
  const { file, repository } = req.body;

  // Check if already processed
  const exists = await db.files.findOne({
    repositoryId: repository.repository_id,
    path: file.path,
    sha: file.sha
  });

  if (exists) {
    // Already processed, return success
    return res.status(200).json({ status: 'already_processed' });
  }

  // Process the file...
  await processFile(file);

  res.status(201).json({ status: 'created' });
});

{
  "status": "ok"
}

{
  "status": "error",
  "message": "Description of what went wrong"
}