Create a webhook

import crypto from 'node:crypto';
import express from 'express';

const app = express();

// express.raw gives you the untouched body as a Buffer
app.post('/webhooks/lite', express.raw({ type: 'application/json' }), (req, res) => {
  const signature = req.get('X-Lite-Signature');
  const rawBody = req.body; // Buffer

  const expected = crypto
    .createHmac('sha256', process.env.LITE_WEBHOOK_SECRET)
    .update(rawBody)
    .digest('hex');

  const valid = crypto.timingSafeEqual(
    Buffer.from(signature, 'hex'),
    Buffer.from(expected, 'hex'),
  );
  if (!valid) return res.status(401).json({ error: 'invalid signature' });

  const event = JSON.parse(rawBody.toString('utf8'));
  res.status(200).json({ received: true });
  // process event...
});

import hmac
import hashlib
from flask import Flask, request, abort

app = Flask(__name__)

def verify(payload: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(secret.encode("utf-8"), payload, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)

@app.post("/webhooks/lite")
def handle_webhook():
    signature = request.headers.get("X-Lite-Signature", "")
    payload = request.get_data()  # raw body bytes
    if not verify(payload, signature, WEBHOOK_SECRET):
        abort(401)
    event = request.get_json()
    # process event...
    return {"received": True}, 200

{
  "event": "payment.captured",
  "mode": "live",
  "data": {
    "id": "b21dc531-12c7-41cd-bd1a-e5986cf6a28e",
    "orderId": "ORD-123456",
    "amount": 1100,
    "currency": "SAR",
    "status": "CAPTURED",
    "paymentMethod": "CARD",
    "channelId": "1ddbfa13-8926-45cb-9ebc-8b2196bcc9a4"
  }
}