X-Webhook-Signature: [HMAC signature]

# A QUICK PYTHON SERVER FILE TO PROCESS INCOMING WEBHOOK, as a proof of concept
# run server via `$ uvicorn webhook_receiver:app --port 8080 --reload`

from fastapi import FastAPI, Request, HTTPException, status
import hmac
import hashlib
import time
import logging
import json

app = FastAPI()
logger = logging.getLogger(__name__)

WEBHOOK_SECRET = "whsec_HREmNnq5mKLlFNh1l9RO5Zi8wdcuaggf6l67e0Uqjn0"
MAX_TIMESTAMP_DIFF = 300  # 5 mins

def verify_signature(payload_body: str, signature: str, timestamp: str) -> bool:
    """
    Helper fnc to verify the webhook signature and timestamp
    """
    try:
        timestamp_int = int(timestamp)
        current_time = int(time.time())
        if abs(current_time - timestamp_int) > MAX_TIMESTAMP_DIFF:
            logger.warning(
                f"Webhook timestamp too old. Current time: {current_time}, "
                f"Webhook time: {timestamp_int}, "
            )
            return False
    except ValueError:
        logger.error(f"Invalid timestamp format: {timestamp}")
        return False

    expected_signature = hmac.new(
        WEBHOOK_SECRET.encode('utf-8'),
        payload_body.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected_signature, signature)

@app.post("/webhook/receive")
async def receive_webhook(request: Request):
    """
    Endpoint to receive the webhooks
    """
    body = await request.body()
    payload_body = body.decode()
    
    signature = request.headers.get("X-Webhook-Signature")
    timestamp = request.headers.get("X-Webhook-Timestamp")
    
    if not signature or not timestamp:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST,
            detail="Missing signature or timestamp"
        )
    
    if not verify_signature(payload_body, signature, timestamp):
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Invalid signature"
        )
    
    try:
        data = json.loads(payload_body)
        logger.info(f"Received valid webhook: {json.dumps(data, indent=2)}")
        return {"status": "success", "message": "Webhook received and verified"}
    except json.JSONDecodeError:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST,
            detail="Invalid JSON payload"
        )

{
  "_id": "671a14adb4e6f3252807fd5e",
  "event_type": "call_ended",
  "timestamp": 1729762448,
  "data": {
    "id": "671a1495b4e6f3252807fd5d",
    "agent_id": "66ff95645e57c2873ff376cf",
    "answer_machine": null,
    "call_summary": "The caller did not fully engage with the assistant.",
    "from_phone": "+61473358879",
    "to_phone": "+61899229387",
    "direction": "inbound",
    "created_by": null,
    "status": "completed",
    "error": null,
    "transcript": "BOT: Hi there, I'm John's Agent Skynet, may I ask who's calling?\nHUMAN: Thank you. Goodbye.\nBOT: I will let the Boss know that you've called, they will reach out to you as soon as possible.\nBOT: Goodbye!",
    "duration": 20,
    "created_at": "2024-10-24T09:34:13.040000",
    "updated_at": "2024-10-24T09:34:13.040000",
    "start_time": "2024-10-24T09:34:12",
    "end_time": "2024-10-24T09:34:32",
    "post_call_action_results": [
      {
        "created_at": "2024-10-24T09:34:03.344000",
        "destination": "+61473358879",
        "error": null,
        "message": "New Call (Skynet)\nFrom: +61473358879\n\nThe caller did not engage with the assistant.",
        "source": "+61483981303",
        "status": "success",
        "status_message": null,
        "type": "send_sms"
      }
    ],
    "recording_url": "https://example.com/CA12345678910.wav",
    "recording_url_expires_at": "2024-10-24T09:34:13.040000",
    "timestamps": [
      {
        "timestamp": 1744356337.9487917, 
        "event_type": "message", 
        "message_type": "bot", 
        "text": "Hi, I am RayBlack's assistant, George Droyd. May I ask who is calling?"
      },
      {
        "timestamp": 1744356346.2009048, 
        "event_type": "message", 
        "message_type": "human", 
        "text": "This is John. Goodbye"
      },
      {
        "timestamp": 1744356358.3612301, 
        "event_type": "action_start", 
        "action_id": "67f8c4061656bf13a7b9a927", 
        "action_type": "action_end_call", 
        "action_config": {
          "type": "action_end_call", 
          "transition_message": "Goodbye, take care!"
        }, 
        "action_input": {
          "type": "action_end_call"
        }
      },
      {
        "timestamp": 1744356358.3666494, 
        "event_type": "action_end", 
        "action_id": "67f8c4061656bf13a7b9a927", 
        "action_type": "action_end_call", 
        "action_output": {
          "type": "action_end_call", 
          "status": "success", 
          "status_message": null
        }
      }
    ]
  }
}

{
  "_id": "671a14adb4e6f3252807fd5e",
  "event_type": "call_ended",
  "timestamp": 1729762448,
  "data": {
    "id": "671a1495b4e6f3252807fd5d",
    "agent_id": "66ff95645e57c2873ff376cf",
    "answer_machine": null,
    "call_summary": "Transcript is empty",
    "from_phone": "+61473358879",
    "to_phone": "+61899229387",
    "direction": "inbound",
    "created_by": null,
    "status": "failed",
    "error": "Call failed to connect.",
    "answer_machine": null,
    "transcript": "HUMAN: No transcript available",
    "duration": "0",
    "created_at": "2024-10-01T07:48:53.130000",
    "updated_at": "2024-10-01T07:48:53.130000",
    "start_time": "2024-10-01T07:48:53",
    "end_time": "2024-10-01T07:48:53",
    "post_call_action_results": [],
    "recording_url": null,
    "recording_url_expires_at": null,
    "timestamps": [
      {
        "timestamp": 1744356337.9487917, 
        "event_type": "message", 
        "message_type": "bot", 
        "text": "No trascript available"
      },
    ]
  }
}