const response = await fetch('https://api.veriplus.co.uk/api/v3/webhooks', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${apiKey}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    url: 'https://yourdomain.com/webhooks/veriplus',
    events: [
      'verification.completed',
      'aml.match_found',
      'deepfake.scan_completed',
      'kyt.high_risk_detected'
    ],
    secret: 'whsec_' + crypto.randomUUID(),
    description: 'Production webhook endpoint'
  })
});
 
const data = await response.json();
console.log('Webhook ID:', data.data.webhookId);
console.log('Secret:', data.data.secret); // Save this!

const express = require('express');
const crypto = require('crypto');
 
const app = express();
app.use(express.json());
 
const WEBHOOK_SECRET = process.env.VERIPLUS_WEBHOOK_SECRET;
 
function verifySignature(payload, signature, secret) {
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(payload))
    .digest('hex');
 
  return crypto.timingSafeEqual(
    Buffer.from(signature.replace('sha256=', '')),
    Buffer.from(expectedSignature)
  );
}
 
app.post('/webhooks/veriplus', (req, res) => {
  const signature = req.headers['x-veriplus-signature'];
  const event = req.headers['x-veriplus-event'];
  const payload = req.body;
 
  // Verify signature
  if (!verifySignature(payload, signature, WEBHOOK_SECRET)) {
    console.error('Invalid webhook signature');
    return res.status(401).json({ error: 'Invalid signature' });
  }
 
  // Process event
  console.log('Received event:', event);
 
  switch (event) {
    case 'verification.completed':
      handleVerificationCompleted(payload.data);
      break;
 
    case 'aml.match_found':
      handleAmlMatch(payload.data);
      break;
 
    case 'deepfake.scan_completed':
      handleDeepfakeScan(payload.data);
      break;
 
    case 'kyt.high_risk_detected':
      handleKytAlert(payload.data);
      break;
 
    default:
      console.log('Unknown event type:', event);
  }
 
  // Return 200 to acknowledge receipt
  res.status(200).json({ received: true });
});
 
function handleVerificationCompleted(data) {
  console.log('Verification completed:', data.verificationId);
  console.log('Result:', data.result);
 
  // Update your database, send email, etc.
  if (data.result === 'APPROVED') {
    // Activate customer account
  } else if (data.result === 'REJECTED') {
    // Notify compliance team
  }
}
 
function handleAmlMatch(data) {
  console.log('AML match found:', data.screeningId);
  console.log('Risk level:', data.riskLevel);
 
  // Alert compliance team for manual review
  if (data.riskLevel === 'CRITICAL') {
    // Send urgent notification
  }
}
 
app.listen(3000, () => {
  console.log('Webhook server listening on port 3000');
});

const response = await fetch('https://api.veriplus.co.uk/api/v3/webhooks', {
  headers: {
    'Authorization': `Bearer ${apiKey}`
  }
});
 
const data = await response.json();
console.log('Webhooks:', data.data);

const response = await fetch(
  `https://api.veriplus.co.uk/api/v3/webhooks/${webhookId}`,
  {
    method: 'PATCH',
    headers: {
      'Authorization': `Bearer ${apiKey}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      events: [
        'verification.completed',
        'aml.match_found',
        'deepfake.scan_completed',
        'kyt.high_risk_detected',
        'credits.low_balance'
      ]
    })
  }
);

const response = await fetch(
  `https://api.veriplus.co.uk/api/v3/webhooks/${webhookId}`,
  {
    method: 'DELETE',
    headers: {
      'Authorization': `Bearer ${apiKey}`
    }
  }
);
 
if (response.ok) {
  console.log('Webhook deleted');
}

const response = await fetch(
  `https://api.veriplus.co.uk/api/v3/webhooks/${webhookId}/test`,
  {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${apiKey}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      event: 'verification.completed'
    })
  }
);
 
const data = await response.json();
console.log('Test delivery ID:', data.data.deliveryId);
console.log('Response code:', data.data.responseCode);

const response = await fetch(
  `https://api.veriplus.co.uk/api/v3/webhooks/${webhookId}/deliveries`,
  {
    headers: {
      'Authorization': `Bearer ${apiKey}`
    }
  }
);
 
const data = await response.json();
data.data.forEach(delivery => {
  console.log(`${delivery.event}: ${delivery.responseCode} (${delivery.duration}ms)`);
});