Webhooks

const express = require('express');
const crypto = require('crypto');
const app = express();

// Middleware para capturar el body raw (necesario para verificar firma)
app.use('/webhooks/taxo', express.raw({ type: 'application/json' }));

app.post('/webhooks/taxo', (req, res) => {
  const signature = req.headers['x-taxo-signature'];
  const timestamp = req.headers['x-taxo-timestamp'];
  const payload = req.body;
  
  // Verificar que el webhook no sea muy antiguo (5 minutos)
  const webhookTimestamp = parseInt(timestamp);
  const currentTime = Math.floor(Date.now() / 1000);
  if (currentTime - webhookTimestamp > 300) {
    return res.status(400).json({ error: 'Webhook too old' });
  }
  
  // Verificar firma HMAC (si tienes secreto configurado)
  const webhookSecret = process.env.TAXO_WEBHOOK_SECRET;
  if (webhookSecret && signature) {
    const expectedSignature = crypto
      .createHmac('sha256', webhookSecret)
      .update(timestamp + '.' + payload)
      .digest('hex');
    
    if (signature !== `sha256=${expectedSignature}`) {
      return res.status(401).json({ error: 'Invalid signature' });
    }
  }
  
  // Parsear el payload
  const event = JSON.parse(payload.toString());
  
  // Procesar evento
  try {
    handleWebhookEvent(event);
    
    // Responder con 200 para confirmar recepción
    res.status(200).json({ received: true });
    
  } catch (error) {
    console.error('Error procesando webhook:', error);
    res.status(500).json({ error: 'Processing failed' });
  }
});

function handleWebhookEvent(event) {
  console.log(`Event received: ${event.event.type}`);
  
  switch (event.event.type) {
    case 'extraction.completed':
      handleExtractionCompleted(event.data);
      break;
      
    case 'extraction.failed':
      handleExtractionFailed(event.data);
      break;
      
    case 'document.ready':
      handleDocumentReady(event.data);
      break;
      
    default:
      console.log(`Unhandled event type: ${event.event.type}`);
  }
}

function handleExtractionCompleted(data) {
  console.log(`✅ Extraction ${data.extractionId} completed:`);
  console.log(`   - ${data.summary.successfulDownloads} documents downloaded`);
  console.log(`   - ${data.summary.failedDownloads} failures`);
  
  // Here you can:
  // - Update status in your database
  // - Send email notification
  // - Start automatic document download
  // - Process documents with your business logic
}

function handleExtractionFailed(data) {
  console.error(`❌ Extraction ${data.extractionId} failed:`);
  console.error(`   Error: ${data.error.message}`);
  
  // Here you can:
  // - Mark extraction as failed in your DB
  // - Send alert to support team
  // - Attempt reprocessing if error is recoverable
}

function handleDocumentReady(data) {
  console.log(`📄 Document ready: ${data.document.uuid}`);
  
  // Process individual document
  // - Download automatically
  // - Extract specific data
  // - Notify downstream systems
}

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});