Webhook

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.created",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.updated",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "changed_fields": [
      "whatsapp_number",
      "address"
    ]
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.package_changed",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "name": "20 Mbps",
        "price": 250000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "previous_package": {
      "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
      "name": "10 Mbps",
      "price": 150000
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.deleted",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "inactive",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.import_completed",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "import": {
      "source": "mikrotik",
      "total": 120,
      "imported": 118,
      "skipped": 2,
      "failed": 0,
      "categories": [
        {
          "service": "pppoe",
          "status": "complete",
          "total": 120,
          "imported": 118,
          "skipped": 2,
          "failed": 0
        }
      ],
      "started_at": "2026-09-29T03:00:00.000Z",
      "finished_at": "2026-09-29T03:01:12.000Z"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "invoice.created",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "invoice": {
      "id": "5e4d3c2b-1a09-4f8e-9d7c-6b5a4f3e2d1c",
      "number": null,
      "amount": 150000,
      "status": "pending",
      "period_start": "2026-10-05",
      "period_end": "2026-11-05",
      "due_date": "2026-10-05",
      "paid_at": null,
      "created_at": "2026-10-02T17:15:00.000Z"
    },
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "invoice.overdue",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "invoice": {
      "id": "5e4d3c2b-1a09-4f8e-9d7c-6b5a4f3e2d1c",
      "number": null,
      "amount": 150000,
      "status": "overdue",
      "period_start": "2026-10-05",
      "period_end": "2026-11-05",
      "due_date": "2026-10-05",
      "paid_at": null,
      "created_at": "2026-10-02T17:15:00.000Z"
    },
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "payment.promised",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "promise": {
      "until": "2026-10-10",
      "amount": 150000,
      "note": "Bayar setelah gajian",
      "invoice_id": "5e4d3c2b-1a09-4f8e-9d7c-6b5a4f3e2d1c"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "payment.received",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-11-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "payment": {
      "id": "2c3d4e5f-6a7b-4c8d-9e0f-1a2b3c4d5e6f",
      "amount": 150000,
      "method": "cash",
      "months": 1,
      "note": null,
      "paid_at": "2026-10-03T04:20:00.000Z",
      "previous_due_date": "2026-10-05",
      "new_due_date": "2026-11-05"
    }
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.isolated",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "suspended",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-10-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "reason": "overdue"
  }
}

{
  "id": "evt_7f3a0c1e9b2d4e5f8a6b7c8d9e0f1a2b",
  "type": "customer.reactivated",
  "timestamp": "2026-10-03T04:20:00.000Z",
  "data": {
    "customer": {
      "id": "8d1b6a54-2f1e-4c3a-9b7d-0c5e2a1f9e10",
      "service": "pppoe",
      "name": "Budi Santoso",
      "username": "budi01",
      "whatsapp_number": "6281234567890",
      "address": "Jl. Melati No. 3, RT 03/RW 02",
      "status": "active",
      "package": {
        "id": "3f7c2d10-6a4b-4e5f-8c9d-1a2b3c4d5e6f",
        "name": "10 Mbps",
        "price": 150000
      },
      "router": {
        "id": "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d",
        "name": "MikroTik Utama"
      },
      "due_date": "2026-11-05",
      "expires_at": null,
      "created_at": "2026-09-05T02:15:00.000Z"
    },
    "reason": "payment"
  }
}

import crypto from "node:crypto";

export function verifyBillingvro(rawBody, headers, secret) {
  const id = headers["webhook-id"];
  const timestamp = headers["webhook-timestamp"];
  const signatures = headers["webhook-signature"];
  if (!id || !timestamp || !signatures) return false;

  // Tolak kiriman lebih dari 5 menit (mencegah kiriman lama diputar ulang).
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return false;

  const key = Buffer.from(secret.replace(/^whsec_/, ""), "base64");
  const expected = crypto
    .createHmac("sha256", key)
    .update(`${id}.${timestamp}.${rawBody}`)
    .digest("base64");

  return signatures.split(" ").some((part) => {
    const sig = part.split(",")[1] ?? "";
    return (
      sig.length === expected.length &&
      crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))
    );
  });
}

<?php
function verifyBillingvro(string $rawBody, array $headers, string $secret): bool
{
    $id = $headers['webhook-id'] ?? '';
    $timestamp = $headers['webhook-timestamp'] ?? '';
    $signatures = $headers['webhook-signature'] ?? '';
    if ($id === '' || $timestamp === '' || $signatures === '') {
        return false;
    }
    // Tolak kiriman lebih dari 5 menit (mencegah kiriman lama diputar ulang).
    if (abs(time() - (int) $timestamp) > 300) {
        return false;
    }
    $key = base64_decode(preg_replace('/^whsec_/', '', $secret));
    $expected = base64_encode(
        hash_hmac('sha256', $id . '.' . $timestamp . '.' . $rawBody, $key, true)
    );
    foreach (explode(' ', $signatures) as $part) {
        $sig = explode(',', $part, 2)[1] ?? '';
        if (hash_equals($expected, $sig)) {
            return true;
        }
    }
    return false;
}

// Contoh pemakaian di endpoint PHP:
// $raw = file_get_contents('php://input');
// $headers = array_change_key_case(getallheaders(), CASE_LOWER);
// if (!verifyBillingvro($raw, $headers, 'whsec_...')) { http_response_code(401); exit; }
// $event = json_decode($raw, true);

import base64
import hashlib
import hmac
import time


def verify_billingvro(raw_body: bytes, headers: dict, secret: str) -> bool:
    msg_id = headers.get("webhook-id", "")
    timestamp = headers.get("webhook-timestamp", "")
    signatures = headers.get("webhook-signature", "")
    if not (msg_id and timestamp and signatures):
        return False
    # Tolak kiriman lebih dari 5 menit (mencegah kiriman lama diputar ulang).
    if abs(time.time() - int(timestamp)) > 300:
        return False
    key = base64.b64decode(secret.removeprefix("whsec_"))
    signed = f"{msg_id}.{timestamp}.".encode() + raw_body
    expected = base64.b64encode(hmac.new(key, signed, hashlib.sha256).digest()).decode()
    return any(
        hmac.compare_digest(expected, part.split(",", 1)[1])
        for part in signatures.split(" ")
        if "," in part
    )