POST /v1/webhooks

{
  "url": "https://seu-sistema.com/webhooks/salesos",
  "events": ["lead.created", "deal.won", "deal.lost"],
  "secret": "sua_chave_secreta"
}

{
  "id": "evt_uuid",
  "event": "deal.won",
  "timestamp": "2026-03-15T14:30:00Z",
  "data": {
    "id": "uuid",
    "name": "Projeto ABC",
    "value": 75000.00,
    "stage": "closed_won",
    "assigned_to": "uuid",
    "company": "Empresa XYZ"
  }
}

const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}