From 6eb64e96721c1cc69012cc8ffe526c1db4092e9e Mon Sep 17 00:00:00 2001
From: Baron-722 <mahmoud.barahmeh96@gmail.com>
Date: Sun, 19 Apr 2026 17:24:23 +0400
Subject: [PATCH] Update app.js

---
 app.js | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index 5ab128e4b4..dfde3f0ba1 100644
--- a/app.js
+++ b/app.js
@@ -58,4 +58,29 @@ const html = `
     </section>
   </body>
 </html>
-`
+const crypto = require("crypto");
+
+// webhook route
+app.post(
+  "/api/stream/webhook",
+  express.raw({ type: "application/json" }),
+  (req, res) => {
+    const signature = req.headers["cf-webhook-signature"];
+    const secret = process.env.STREAM_WEBHOOK_SECRET;
+
+    const expected = crypto
+      .createHmac("sha256", secret)
+      .update(req.body)
+      .digest("hex");
+
+    if (signature !== expected) {
+      return res.status(401).send("Invalid signature");
+    }
+
+    const payload = JSON.parse(req.body.toString());
+
+    console.log("📦 Webhook received:", payload);
+
+    res.sendStatus(200);
+  }
+);