Webhooks API

// Node.js Express example
app.post('/webhooks/oilprice', (req, res) => {
  // Verify signature
  const signature = req.headers['x-oilpriceapi-signature'];
  const timestamp = req.headers['x-oilpriceapi-signature-timestamp'];
  
  if (!verifyWebhookSignature(req.body, signature, timestamp)) {
    return res.status(401).send('Unauthorized');
  }
  
  // Process event
  const { type, data } = req.body;
  
  switch(type) {
    case 'price.updated':
      console.log(`Price update: ${data.commodity} = $${data.value}`);
      break;
    case 'drilling.rig_count.updated':
      console.log(`Rig count update: ${data.region} = ${data.value} rigs`);
      break;
  }
  
  res.status(200).send('OK');
});

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, timestamp) {
  // Prevent replay attacks (5 minute window)
  if (Date.now() - parseInt(timestamp) * 1000 > 300000) {
    return false;
  }
  
  const payloadString = JSON.stringify(payload);
  const expectedSignature = crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(`${payloadString}.${timestamp}`)
    .digest('hex');
    
  return signature === expectedSignature;
}

// Store processed event IDs to prevent duplicate processing
const processedEvents = new Set();

app.post('/webhook', (req, res) => {
  const eventId = req.body.id;
  
  if (processedEvents.has(eventId)) {
    return res.status(200).send('Already processed');
  }
  
  // Process event
  processWebhook(req.body);
  processedEvents.add(eventId);
  
  res.status(200).send('OK');
});

app.post('/webhook', async (req, res) => {
  // Quick validation
  if (!isValidWebhook(req)) {
    return res.status(401).send('Unauthorized');
  }
  
  // Acknowledge immediately
  res.status(200).send('OK');
  
  // Process asynchronously
  await jobQueue.add('process-webhook', {
    event: req.body,
    receivedAt: new Date()
  });
});

app.post('/webhook', async (req, res) => {
  try {
    await processWebhook(req.body);
    res.status(200).send('OK');
  } catch (error) {
    console.error('Webhook processing error:', error);
    
    // Return 500 to trigger retry
    res.status(500).send('Internal error');
  }
});

// Update trading dashboard when prices change
app.post('/webhooks/prices', async (req, res) => {
  const { type, data } = req.body;
  
  if (type === 'price.updated') {
    // Update in-memory cache
    priceCache.set(data.commodity, data);
    
    // Broadcast to connected clients
    io.emit('price-update', {
      commodity: data.commodity,
      price: data.value,
      change: data.change_percent,
      timestamp: data.timestamp
    });
    
    // Check trading rules
    await checkTradingAlerts(data);
  }
  
  res.status(200).send('OK');
});

// Monitor drilling activity for investment decisions
app.post('/webhooks/drilling', async (req, res) => {
  const { type, data } = req.body;
  
  switch(type) {
    case 'drilling.rig_count.updated':
      await updateRigCountDashboard(data);
      await checkSupplyIndicators(data);
      break;
      
    case 'drilling.frac_spread.updated':
      await updateCompletionActivity(data);
      await forecastProduction(data);
      break;
      
    case 'drilling.duc_well.updated':
      await analyzeInventoryTrends(data);
      await predictCompletionTiming(data);
      break;
  }
  
  res.status(200).send('OK');
});

// Send alerts based on significant changes
app.post('/webhooks/alerts', async (req, res) => {
  const { type, data } = req.body;
  
  if (type === 'price.significant_change') {
    // Send email alert
    await sendEmail({
      to: alertRecipients,
      subject: `${data.alert_type.toUpperCase()}: ${data.commodity}`,
      body: `${data.name} ${data.alert_type} by ${data.change_percent}% to $${data.value}`
    });
    
    // Send SMS for critical commodities
    if (criticalCommodities.includes(data.commodity)) {
      await sendSMS({
        to: smsRecipients,
        message: `ALERT: ${data.commodity} ${data.alert_type} ${data.change_percent}%`
      });
    }
    
    // Trigger trading actions
    await executeTradingStrategy(data);
  }
  
  res.status(200).send('OK');
});