import hmac
import hashlib

def verify_webhook(payload: bytes, signature: str, signing_secret: str) -> bool:
    if not signature:
        return False

    expected = 'sha256=' + hmac.new(
        signing_secret.encode('utf-8'),
        payload,
        hashlib.sha256
    ).hexdigest()

    return hmac.compare_digest(signature, expected)

# Flask example
@app.route('/webhooks/appdna', methods=['POST'])
def handle_webhook():
    signature = request.headers.get('x-appdna-signature')
    if not verify_webhook(request.data, signature, WEBHOOK_SECRET):
        return 'Invalid signature', 401

    event = request.get_json()
    print(f"Received {event['type']}: {event['id']}")

    # Process asynchronously (e.g., enqueue to Celery)
    process_event.delay(event)

    return 'OK', 200

require 'openssl'

def verify_webhook(payload, signature, signing_secret)
  return false unless signature

  expected = 'sha256=' + OpenSSL::HMAC.hexdigest(
    'SHA256',
    signing_secret,
    payload
  )

  Rack::Utils.secure_compare(signature, expected)
end

# Sinatra example
post '/webhooks/appdna' do
  payload = request.body.read
  signature = request.env['HTTP_X_APPDNA_SIGNATURE']

  unless verify_webhook(payload, signature, ENV['APPDNA_WEBHOOK_SECRET'])
    halt 401, 'Invalid signature'
  end

  event = JSON.parse(payload)
  puts "Received #{event['type']}: #{event['id']}"

  # Process asynchronously
  ProcessEventJob.perform_async(event)

  status 200
  'OK'
end