เชื่อมต่อ LabSync กับ ทุกระบบ

import crypto from "crypto";

export function verifyLabSync(
  body: string,
  header: string,
  secret: string
): boolean {
  const parts = Object.fromEntries(
    header.split(",").map(p => p.split("="))
  );
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${parts.t}.${body}`)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(`v1=${expected}`),
    Buffer.from(parts.v1 ? `v1=${parts.v1}` : "")
  );
}

// Express example
app.post("/webhook", (req, res) => {
  const sig = req.headers["x-labsync-signature"];
  if (!verifyLabSync(req.rawBody, sig, SECRET)) {
    return res.status(401).send("Invalid signature");
  }
  const { event, data } = req.body;
  // handle event...
  res.json({ ok: true });
});