TestDino Webhooks

curl -X POST https://api.testdino.com/api/v1/public/{projectId}/webhooks \
  -H "Authorization: Bearer $TESTDINO_PAT" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://example.com/hooks/testdino",
    "events": ["RUN_FINISHED"],
    "conditions": { "outcome": "failed" },
    "description": "Alert on failed runs"
  }'

import crypto from "node:crypto";

function verify(secret, rawBody, header, toleranceSeconds = 300) {
  const parts = Object.fromEntries(
    header.split(",").map((kv) => {
      const i = kv.indexOf("=");
      return [kv.slice(0, i).trim(), kv.slice(i + 1).trim()];
    })
  );

  const timestamp = Number(parts.t);
  if (!Number.isFinite(timestamp) || !parts.v1) return false;

  // Reject replayed requests outside the tolerance window.
  if (Math.abs(Math.floor(Date.now() / 1000) - timestamp) > toleranceSeconds) {
    return false;
  }

  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

  const a = Buffer.from(parts.v1, "hex");
  const b = Buffer.from(expected, "hex");
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

curl "https://api.testdino.com/api/v1/public/{projectId}/webhooks/{webhookId}/deliveries?status=failed" \
  -H "Authorization: Bearer $TESTDINO_PAT"