npm install @recur/sdk

import express from "express";
import { verifyWebhookSignature, parseWebhookPayload } from "@recur/sdk";
 
const app = express();
const secret = process.env.RECUR_WEBHOOK_SECRET!;
 
app.post(
  "/webhooks/recur",
  express.raw({ type: "application/json" }),
  (req, res) => {
    const body = req.body.toString();
    const signature = req.headers["x-recur-signature"] as string;
    const timestamp = req.headers["x-recur-timestamp"] as string;
 
    try {
      verifyWebhookSignature(body, signature, timestamp, secret);
    } catch {
      return res.status(401).send("Invalid signature");
    }
 
    const event = parseWebhookPayload(body);
 
    switch (event.type) {
      case "payment_success":
        // Grant access, send receipt
        break;
      case "payment_failed":
        // Notify subscriber
        break;
      case "cancel_finalized":
        // Revoke access
        break;
    }
 
    res.status(200).end();
  },
);

import { verifyWebhookSignature, parseWebhookPayload } from "@recur/sdk";
 
export async function POST(req: Request) {
  const body = await req.text();
  const signature = req.headers.get("x-recur-signature")!;
  const timestamp = req.headers.get("x-recur-timestamp")!;
  const secret = process.env.RECUR_WEBHOOK_SECRET!;
 
  try {
    verifyWebhookSignature(body, signature, timestamp, secret);
  } catch {
    return new Response("Invalid signature", { status: 401 });
  }
 
  const event = parseWebhookPayload(body);
 
  switch (event.type) {
    case "subscription_created":
      // Provision user
      break;
    case "payment_success":
      // Extend access
      break;
    case "cancel_requested":
      // Mark cancelling
      break;
  }
 
  return Response.json({ ok: true });
}

import { createServer } from "http";
import { verifyWebhookSignature, parseWebhookPayload } from "@recur/sdk";
 
const secret = process.env.RECUR_WEBHOOK_SECRET!;
 
const server = createServer(async (req, res) => {
  if (req.url === "/webhooks/recur" && req.method === "POST") {
    const chunks: Buffer[] = [];
    for await (const chunk of req) chunks.push(chunk as Buffer);
    const body = Buffer.concat(chunks).toString();
 
    try {
      verifyWebhookSignature(
        body,
        req.headers["x-recur-signature"] as string,
        req.headers["x-recur-timestamp"] as string,
        secret,
      );
      const event = parseWebhookPayload(body);
      // handle event...
      res.writeHead(200).end();
    } catch {
      res.writeHead(401).end();
    }
  }
});