POST /v1/webhooks

{
  "url": "https://tu-servidor.com/webhook/salesos",
  "events": ["lead.created", "opportunity.won"],
  "secret": "tu_secreto_de_verificación",
  "active": true
}

{
  "id": "evt_abc123",
  "event": "lead.created",
  "timestamp": "2026-03-15T10:30:00Z",
  "data": {
    "id": "lead_xyz789",
    "name": "Juan Pérez",
    "email": "juan@empresa.com",
    "stage": "prospecting"
  }
}

import hmac
import hashlib

def verify_signature(payload, signature, secret):
    expected = hmac.new(
        secret.encode(),
        payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)