Webhook Integration & Events Guide

{
  "data": {
    "entity": "event",
    "account_id": "acc_66d2e734c67cf10fd3b46b86",
    "event": "payment.paid",
    "contains": ["payment"],
    "created_at": 1725264000,
    "payload": {
      "payment": {
        "entity": {
          "id": "pay_66d3c812a01b",
          "entity": "payment",
          "created_at": 1725264000000,
          "price": 1000,
          "currency": "INR",
          "status": "paid",
          "order_id": "order_NX8aBz10Q1pLMq",
          "pw_id": "rzp_pay_9912059abc",
          "payment_gateway": "razorpay",
          "user_id": "usr_9912059abc",
          "user_name": "Sarah Connor",
          "user_email": "sarah.connor@example.com",
          "user_phone": "+919876543210",
          "meta_data": {}
        }
      }
    }
  }
}

const express = require("express");
const crypto = require("crypto");
 
const app = express();
app.use(express.json());
 
function verifyWebhookSignature(payload, signature, secret) {
  if (!secret) return true;
  const computedSignature = crypto
    .createHmac("sha256", secret)
    .update(JSON.stringify({ data: payload }))
    .digest("hex");
 
  return crypto.timingSafeEqual(
    Buffer.from(computedSignature, "utf8"),
    Buffer.from(signature, "utf8")
  );
}
 
app.post("/api/webhooks/zezopay", (req, res) => {
  const signature = req.headers["x-zezopay-webhook-signature"];
  const webhookSecret = process.env.ZEZOPAY_WEBHOOK_SECRET;
 
  if (!signature || !verifyWebhookSignature(req.body.data, signature, webhookSecret)) {
    return res.status(401).json({ error: "Invalid signature" });
  }
 
  const { event, payload } = req.body.data;
 
  switch (event) {
    case "payment.paid":
      console.log("Payment captured:", payload.payment.entity);
      // Fulfill order, deliver items
      break;
 
    case "subscription.active":
      console.log("Subscription activated:", payload.subscription.entity);
      // Provision premium access
      break;
 
    case "product.purchase.paid":
      console.log("Product purchased:", payload.digital_product.entity);
      // Unlock digital product access
      break;
 
    case "payment.failed":
      console.log("Payment failed:", payload.payment.entity);
      break;
 
    default:
      console.log("Unhandled event type:", event);
  }
 
  // Acknowledge receipt within 10 seconds
  res.status(200).json({ received: true });
});
 
app.listen(3000, () => console.log("Webhook listener running on port 3000"));