🧭 add a Webhook Endpoint

You need to set a webhook endpoint up, where we will send webhooks. Visit our console and head to /webhooks, and click on add endpoint:

You need to provide your endpoint, the eventTypes you want to receive, and if your endpoint is active. You can also edit the data later on.

Click on "Add" and wait a few seconds until your endpoint appears in the endpoints table.

🔐 Verify webhooks

The first thing you need to verify incoming webhooks is to get your webhook secret from the console, just click on the endpoint you are working on an copy its secret.

NOTE: Every endpoint has its own secret.

Now put that secret into your .env file:

BRIX_WEBHOOK_SECRET=c8c3c759c30410e041656ad72a1311c2bd4a384d6ce003d2c26d9d24e46a84a7

Before you can start performing actions based on specific webhooks, you must verify that the incoming requests are from BrixPay. This is done by validating the X-Brix-Signature included in the request headers using the endpoint specific secret. Here's how you do this in your NextJS API route:

import { NextResponse } from 'next/server';
import crypto from 'crypto';

export async function POST(req) {
    const webhookSecret = process.env.BRIX_WEBHOOK_SECRET;
    const signature = req.headers.get('X-Brix-Signature');
    const body = await req.text();

    const expectedSignature = createHmac(
        "sha256",
        process.env.BRIX_WEBHOOK_SECRET
    ).update(body).digest("hex");

    if (signature !== expectedSignature) {
        return NextResponse.json({ error: 'Invalid signature' }, { status: 401 });
    }

    const event = JSON.parse(body);

    // Handle the webhook event
    console.log('Received event:', event);

    return NextResponse.json({ message: "Webhook verified" }, { status: 200 });
}