Build apps on top of Crewio API, Webhooks and Automations

const response = await fetch('https://api.crewio.co/api/developer/v1/helpers', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.CREWIO_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    mode: 'import',
    sync_to_event_id: 'event-uuid',
    helpers: [
      { full_name: 'Max Muster', email: 'max@example.org', tags: ['bar'] },
      { full_name: 'Nora Team', phone: '+49177111222', tags: ['kasse'] },
    ],
  }),
})

const payload = await response.json()
if (!response.ok) throw new Error(payload.error || 'Import failed')

import crypto from 'node:crypto'

function verifyCrewioSignature(rawBody, signatureHeader, secret) {
  const provided = String(signatureHeader || '').replace(/^sha256=/i, '').trim()
  if (!/^[a-f0-9]{64}$/i.test(provided)) return false

  const expected = crypto.createHmac('sha256', secret).update(rawBody, 'utf8').digest('hex')
  return crypto.timingSafeEqual(Buffer.from(expected, 'hex'), Buffer.from(provided, 'hex'))
}

export async function POST(req: Request) {
  const body = await req.text()
  const signature = req.headers.get('x-crewio-signature')
  const isValid = verifyCrewioSignature(body, signature, process.env.CREWIO_WEBHOOK_SECRET!)

  if (!isValid) return new Response('Invalid signature', { status: 401 })
  // process payload...
  return new Response('ok')
}