Receive webhooks from Nango

curl --request POST \
  --url https://api.nango.dev/connect/sessions \
  --header 'Authorization: Bearer <NANGO-API-KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
    "allowed_integrations": ["<INTEGRATION-ID>"],
    "webhook_url_override": "https://<your-tunnel>.ngrok.app/webhooks-from-nango"
  }'

import crypto from 'crypto';

// From Environment Settings > Webhooks > Signing key
const webhookSigningKey = 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx';
const body = // raw request body as string
const hash = crypto.createHmac('sha256', webhookSigningKey).update(body).digest('hex');

import hmac
import hashlib

# From Environment Settings > Webhooks > Signing key
webhook_signing_key = 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
body = # raw request body as bytes
hash = hmac.new(webhook_signing_key.encode('utf-8'), body, hashlib.sha256).hexdigest()

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;

public class Main {
    public static void main(String[] args) throws Exception {
        // From Environment Settings > Webhooks > Signing key
        String webhookSigningKey = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx";
        String body = // raw request body as string

        Mac mac = Mac.getInstance("HmacSHA256");
        SecretKeySpec secretKey = new SecretKeySpec(webhookSigningKey.getBytes(StandardCharsets.UTF_8), "HmacSHA256");
        mac.init(secretKey);
        byte[] hashBytes = mac.doFinal(body.getBytes(StandardCharsets.UTF_8));

        StringBuilder hexString = new StringBuilder();
        for (byte b : hashBytes) {
            hexString.append(String.format("%02x", b));
        }
        String hash = hexString.toString();
    }
}

require 'openssl'

# From Environment Settings > Webhooks > Signing key
webhook_signing_key = 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'
body = # raw request body
hash = OpenSSL::HMAC.hexdigest('SHA256', webhook_signing_key, body)

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "io"
    "net/http"
)

func main() {
    // From Environment Settings > Webhooks > Signing key
    webhookSigningKey := "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
    var body []byte // raw request body

    h := hmac.New(sha256.New, []byte(webhookSigningKey))
    h.Write(body)
    hash := hex.EncodeToString(h.Sum(nil))
}

use hmac::{Hmac, Mac};
use sha2::Sha256;

type HmacSha256 = Hmac<Sha256>;

// From Environment Settings > Webhooks > Signing key
let webhook_signing_key = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx";
let body = // raw request body as string or bytes
let mut mac = HmacSha256::new_from_slice(webhook_signing_key.as_bytes()).unwrap();
mac.update(body.as_bytes());
let hash = format!("{:x}", mac.finalize().into_bytes());

<?php
// From Environment Settings > Webhooks > Signing key
$webhookSigningKey = 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx';
$body = // raw request body as string
$hash = hash_hmac('sha256', $body, $webhookSigningKey);
?>