@venue-family/sdk 1.0.0

package/src/webhooks.ts

@@ -0,0 +1,102 @@
+import type { VenueFamilyEmbedEvent } from './types.js';
+
+/**
+ * Verify an incoming Venue Family webhook or conversion postback HMAC-SHA256 signature.
+ * Works in Node.js, Deno, Bun, and Web standard runtimes (Cloudflare Workers, Browsers).
+ */
+export async function verifyWebhookSignature(
+  payload: string,
+  signatureHeader: string,
+  secret: string
+): Promise<boolean> {
+  if (!signatureHeader || !secret) {
+    return false;
+  }
+
+  const expectedPrefix = 'sha256=';
+  const provided = signatureHeader.startsWith(expectedPrefix)
+    ? signatureHeader.slice(expectedPrefix.length)
+    : signatureHeader;
+
+  // Standard Web Crypto API
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    'raw',
+    encoder.encode(secret),
+    { name: 'HMAC', hash: 'SHA-256' },
+    false,
+    ['sign']
+  );
+
+  const signatureBuffer = await crypto.subtle.sign(
+    'HMAC',
+    key,
+    encoder.encode(payload)
+  );
+
+  const hexHash = Array.from(new Uint8Array(signatureBuffer))
+    .map((b) => b.toString(16).padStart(2, '0'))
+    .join('');
+
+  return hexHash === provided;
+}
+
+export interface EmbedListenerOptions {
+  allowedOrigin?: string;
+  onResize?: (height: number) => void;
+  onTicketPurchase?: (event: Extract<VenueFamilyEmbedEvent, { type: 'ticket-purchase-complete' }>) => void;
+  onFormSubmitted?: (event: Extract<VenueFamilyEmbedEvent, { type: 'form-submitted' }>) => void;
+  onEvent?: (event: VenueFamilyEmbedEvent) => void;
+}
+
+/**
+ * Convenience helper to attach an iframe auto-resize and event listener to any web page.
+ */
+export function attachEmbedListener(
+  iframe: HTMLIFrameElement | string,
+  options: EmbedListenerOptions = {}
+): () => void {
+  const allowedOrigin = options.allowedOrigin ?? 'https://venuefamily.com';
+
+  const handler = (event: MessageEvent) => {
+    if (allowedOrigin !== '*' && event.origin !== allowedOrigin) {
+      return;
+    }
+
+    const data = event.data as VenueFamilyEmbedEvent;
+    if (!data || typeof data !== 'object' || !('type' in data)) {
+      return;
+    }
+
+    const frameEl = typeof iframe === 'string' ? (document.getElementById(iframe) as HTMLIFrameElement | null) : iframe;
+
+    if (data.type === 'resize' && frameEl && typeof data.height === 'number') {
+      frameEl.style.height = `${data.height}px`;
+      options.onResize?.(data.height);
+    }
+
+    if (data.type === 'scroll-into-view' && frameEl && typeof data.top === 'number') {
+      const rect = frameEl.getBoundingClientRect();
+      window.scrollTo({
+        top: window.scrollY + rect.top + data.top - 20,
+        behavior: 'smooth',
+      });
+    }
+
+    if (data.type === 'ticket-purchase-complete') {
+      options.onTicketPurchase?.(data);
+    }
+
+    if (data.type === 'form-submitted') {
+      options.onFormSubmitted?.(data);
+    }
+
+    options.onEvent?.(data);
+  };
+
+  window.addEventListener('message', handler);
+
+  return () => {
+    window.removeEventListener('message', handler);
+  };
+}