XSolla Webhook Example

xsolla_webhooks.py

@app.route('/webhooks', methods=['POST'])
def xsolla_webhook():
  # Get the signature from headers
  signature = request.headers.get('Authorization')

  # Get the raw request body as a string:
  payload = request.data.decode('utf-8')
  payload_with_key = "%s%s" % (payload, XSOLLA_WH_KEY)

  # Verify the webhook signature if provided
  if signature:
    # Remove 'Signature ' prefix if present
    if signature.startswith('Signature '):
        signature = signature[10:]

    # Calculate expected signature
    expected_signature = hashlib.sha1(payload_with_key.encode('utf-8')).hexdigest()

    if not hmac.compare_digest(signature, expected_signature):
        return jsonify({'error': 'Invalid signature'}), 403

    # Process the webhook data
    try:
      data = json.loads(payload)
      # Log the webhook event type
      event_type = data.get('notification_type', 'unknown')
      print(f"Received XSolla webhook: {event_type}")
      # Return success response
      return jsonify({'status': 'success'}), 200
    except json.JSONDecodeError:
      return jsonify({'error': 'Invalid JSON payload'}), 400
    except Exception as e:
      print(f"Error processing webhook: {str(e)}")
      return jsonify({'error': 'Internal server error'}), 500
  return jsonify({'status': 'no signature'}), 200