Webhooks and Results

import { verifyWebhookSignatureDetailed } from "@authbound/server";

export async function POST(request: Request) {
  const payload = await request.text();
  const signature = request.headers.get("x-authbound-signature");

  if (!signature) {
    return new Response("Missing signature", { status: 401 });
  }

  const verification = verifyWebhookSignatureDetailed({
    payload,
    signature,
    secret: process.env.AUTHBOUND_WEBHOOK_SECRET!,
    tolerance: 300,
  });

  if (!verification.valid) {
    return new Response("Invalid signature", { status: 401 });
  }

  const event = JSON.parse(payload);

  if (event.type === "verification.completed") {
    await handleVerificationCompleted(event.data.object);
  }

  return Response.json({ received: true });
}

import { AuthboundClient } from "@authbound/server";

const authbound = new AuthboundClient({
  apiKey: process.env.AUTHBOUND_SECRET_KEY!,
});

const result = await authbound.verifications.getResult("vrf_...");

if (result.status === "verified") {
  console.log(result.assertions);
}

await db.verificationEvents.upsert({
  where: { eventId: event.id },
  create: {
    eventId: event.id,
    verificationId: event.data.object.id,
    type: event.type,
  },
  update: {},
});