Webhooks

# Webhook登録
curl -X POST https://sparksheets.ai/api/v1/webhooks \
  -H "Authorization: Bearer sk_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-server.com/webhook",
    "events": ["sheet.created", "sheet.updated", "spark.executed"]
  }'

<?php
// リクエストボディを取得
$payload = file_get_contents('php://input');

// 署名ヘッダーを取得
$signature = $_SERVER['HTTP_X_SPARKSHEETS_SIGNATURE'] ?? '';

// 期待される署名を計算
$secret = 'whsec_your_webhook_secret';
$expected = 'sha256=' . hash_hmac('sha256', $payload, $secret);

// 署名を検証（タイミング攻撃対策）
if (!hash_equals($expected, $signature)) {
    http_response_code(401);
    exit('Invalid signature');
}

// 検証成功 - ペイロードを処理
$data = json_decode($payload, true);
// ... 処理を続行

const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
    const expected = 'sha256=' + crypto
        .createHmac('sha256', secret)
        .update(payload)
        .digest('hex');

    return crypto.timingSafeEqual(
        Buffer.from(signature),
        Buffer.from(expected)
    );
}

// Express.js での使用例
app.post('/webhook', (req, res) => {
    const signature = req.headers['x-sparksheets-signature'];
    const payload = JSON.stringify(req.body);

    if (!verifyWebhook(payload, signature, process.env.WEBHOOK_SECRET)) {
        return res.status(401).json({ error: 'Invalid signature' });
    }

    // 検証成功 - 処理を続行
    console.log('Webhook received:', req.body);
    res.status(200).json({ received: true });
});

<?php
// SparkSheetsからのWebhookを受信
$payload = file_get_contents('php://input');
$data = json_decode($payload, true);

// sheet.created イベントのみ処理
if ($data['event'] === 'sheet.created') {
    $sheetName = $data['data']['name'];

    // Slack Webhook URL
    $slackUrl = 'https://hooks.slack.com/services/xxx/yyy/zzz';

    // メッセージを送信
    $message = [
        'text' => "新しいシート「{$sheetName}」が作成されました",
        'icon_emoji' => ':sparkles:'
    ];

    $ch = curl_init($slackUrl);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($message));
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
    curl_exec($ch);
    curl_close($ch);
}

http_response_code(200);
echo json_encode(['received' => true]);

<?php
$payload = file_get_contents('php://input');
$data = json_decode($payload, true);

if ($data['event'] === 'sheet.updated') {
    $sheetId = $data['data']['sheet_id'];
    $updatedAt = $data['data']['updated_at'];

    // PDOでデータベース更新
    $pdo = new PDO('mysql:host=localhost;dbname=myapp', 'user', 'pass');

    $stmt = $pdo->prepare('
        UPDATE sheets
        SET synced_at = ?, needs_sync = 1
        WHERE external_id = ?
    ');

    $stmt->execute([$updatedAt, $sheetId]);
}

http_response_code(200);