Created
October 10, 2015 17:37
-
-
Save joshbeckman/5c4f0244914adfd312e4 to your computer and use it in GitHub Desktop.
Revisions
-
joshbeckman created this gist
Oct 10, 2015 .There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,41 @@ const PORT = 3000; const SECRET = 'APP_SHARED_SECRET'; var http = require('http'), crypto = require('crypto'), server; function verifyShopifyHook(req) { var digest = crypto.createHmac('SHA256', SECRET) .update(new Buffer(req.body, 'utf8')) .digest('base64'); return digest === req.headers['X-Shopify-Hmac-Sha256']; } function parseRequestBody(req, res) { req.body = ''; req.on('data', function(chunk) { req.body += chunk.toString('utf8'); }); req.on('end', function() { handleRequest(req, res); }); } function handleRequest(req, res) { if (verifyShopifyHook(req)) { res.writeHead(200); res.end('Verified webhook'); } else { res.writeHead(401); res.end('Unverified webhook'); } } server = http.createServer(parseRequestBody); server.listen(PORT, function(){ console.log("Server listening on: http://localhost:%s", PORT); });