Webhooks die voor je werken

// Next.js App Router
import { NextRequest, NextResponse } from "next/server"
import crypto from "crypto"

function verifySignature(body: string, sig: string) {
  const expected = crypto
    .createHmac("sha256", process.env.WS_WEBHOOK_SECRET!)
    .update(body).digest("hex")
  return crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))
}

export async function POST(req: NextRequest) {
  const body = await req.text()
  const sig  = req.headers.get("x-wesender-signature") ?? ""

  if (!verifySignature(body, sig)) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
  }

  const event = JSON.parse(body)

  switch (event.event) {
    case "email.delivered":
      await markAsDelivered(event.data.email_id)
      break
    case "email.bounced":
      if (event.data.bounce_type === "hard") {
        await removeFromList(event.data.to)
      }
      break
    case "email.complained":
      await unsubscribe(event.data.to)
      break
  }

  return NextResponse.json({ ok: true })
}