SwiftClaim V3

const express = require('express');
const app = express();
app.use(express.json());

app.post('/webhook', (req, res) => {
  // Optional: validate secret token
  const token = req.query.token;
  if (token !== 'your_secret_token') {
    return res.status(403).json({ status: 'forbidden' });
  }

  const { event, timestamp, data } = req.body;

  if (event !== 'payment_received') {
    return res.status(400).json({ status: 'error', message: 'Invalid event' });
  }

  const {
    amount,
    from,
    transaction_id,
    current_balance,
    reference,
    transaction_fee
  } = data;

  // TODO: check duplicate by transaction_id
  // TODO: your logic — update DB, credit wallet, etc.

  console.log(`[${timestamp}] GHS ${amount} from ${from} | TxnID: ${transaction_id}`);

  res.status(200).json({ status: 'received' });
});

app.listen(3000, () => console.log('Webhook server running on port 3000'));

from flask import Flask, request, jsonify
import logging

app = Flask(__name__)
logging.basicConfig(level=logging.INFO)

SECRET_TOKEN = 'your_secret_token'

@app.route('/webhook', methods=['POST'])
def webhook():
    # Optional: validate secret token
    token = request.args.get('token', '')
    if token != SECRET_TOKEN:
        return jsonify({'status': 'forbidden'}), 403

    payload = request.get_json(silent=True)

    if not payload or payload.get('event') != 'payment_received':
        return jsonify({'status': 'error', 'message': 'Invalid payload'}), 400

    data = payload.get('data', {})

    amount       = data.get('amount')
    from_name    = data.get('from')
    txn_id       = data.get('transaction_id')
    balance      = data.get('current_balance')
    reference    = data.get('reference')
    fee          = data.get('transaction_fee')
    timestamp    = payload.get('timestamp')

    # TODO: check duplicate by txn_id
    # TODO: your logic — update DB, credit wallet, etc.

    logging.info(f"[{timestamp}] GHS {amount} from {from_name} | TxnID: {txn_id}")

    return jsonify({'status': 'received'}), 200

if __name__ == '__main__':
    app.run(port=5000)

// routes/api.php
        Route::post('/webhook/swiftclaim', [SwiftClaimWebhookController::class, 'handle']);
        
        // ---
        
        // app/Http/Controllers/SwiftClaimWebhookController.php
        namespace App\Http\Controllers;
        
        use Illuminate\Http\Request;
        use App\Models\Payment;
        use Illuminate\Support\Facades\Log;
        
        class SwiftClaimWebhookController extends Controller
        {
            public function handle(Request $request)
            {
                // Optional: validate secret token
                if ($request->query('token') !== config('services.swiftclaim.secret')) {
                    return response()->json(['status' => 'forbidden'], 403);
                }
        
                $payload = $request->json()->all();
        
                if (empty($payload) || ($payload['event'] ?? '') !== 'payment_received') {
                    return response()->json(['status' => 'error'], 400);
                }
        
                $data = $payload['data'] ?? [];
        
                // Prevent duplicate processing
                if (Payment::where('transaction_id', $data['transaction_id'])->exists()) {
                    return response()->json(['status' => 'duplicate'], 200);
                }
        
                // Save to DB
                Payment::create([
                    'amount'           => $data['amount'],
                    'from'             => $data['from'],
                    'transaction_id'   => $data['transaction_id'],
                    'current_balance'  => $data['current_balance'],
                    'reference'        => $data['reference'],
                    'transaction_fee'  => $data['transaction_fee'],
                    'received_at'      => now(),
                ]);
        
                Log::info('SwiftClaim payment received', $data);
        
                return response()->json(['status' => 'received'], 200);
            }
        }
        
        // ---
        
        // Don't forget to exclude this route from CSRF in:
        // app/Http/Middleware/VerifyCsrfToken.php
        // protected $except = ['api/webhook/swiftclaim'];

// Add to your theme's functions.php or a custom plugin file.
        // Registers a REST API endpoint:
        // POST https://yourdomain.com/wp-json/swiftclaim/v1/webhook
        
        add_action('rest_api_init', function () {
            register_rest_route('swiftclaim/v1', '/webhook', [
                'methods'             => 'POST',
                'callback'            => 'swiftclaim_handle_webhook',
                'permission_callback' => '__return_true',
            ]);
        });
        
        function swiftclaim_handle_webhook(WP_REST_Request $request) {
            // Optional: validate secret token
            $token = $request->get_param('token');
            if ($token !== 'your_secret_token') {
                return new WP_REST_Response(['status' => 'forbidden'], 403);
            }
        
            $payload = $request->get_json_params();
        
            if (empty($payload) || ($payload['event'] ?? '') !== 'payment_received') {
                return new WP_REST_Response(['status' => 'error'], 400);
            }
        
            $data = $payload['data'] ?? [];
        
            $amount      = sanitize_text_field($data['amount'] ?? '');
            $from        = sanitize_text_field($data['from'] ?? '');
            $txn_id      = sanitize_text_field($data['transaction_id'] ?? '');
            $balance     = sanitize_text_field($data['current_balance'] ?? '');
            $reference   = sanitize_text_field($data['reference'] ?? '');
            $fee         = sanitize_text_field($data['transaction_fee'] ?? '');
            $timestamp   = sanitize_text_field($payload['timestamp'] ?? '');
        
            // Check for duplicate
            global $wpdb;
            $table = $wpdb->prefix . 'swiftclaim_payments';
            $exists = $wpdb->get_var(
                $wpdb->prepare("SELECT COUNT(*) FROM $table WHERE transaction_id = %s", $txn_id)
            );
            if ($exists > 0) {
                return new WP_REST_Response(['status' => 'duplicate'], 200);
            }
        
            // Insert into custom table
            $wpdb->insert($table, [
                'amount'           => $amount,
                'sender'           => $from,
                'transaction_id'   => $txn_id,
                'current_balance'  => $balance,
                'reference'        => $reference,
                'transaction_fee'  => $fee,
                'received_at'      => current_time('mysql'),
            ]);
        
            // Optional: send admin email
            // wp_mail(get_option('admin_email'), 'New Payment via SwiftClaim', "GHS $amount from $from");
        
            return new WP_REST_Response(['status' => 'received'], 200);
        }
        
        // ---
        
        // Create DB table on plugin activation:
        function swiftclaim_create_table() {
            global $wpdb;
            $table = $wpdb->prefix . 'swiftclaim_payments';
            $charset = $wpdb->get_charset_collate();
            $sql = "CREATE TABLE IF NOT EXISTS $table (
                id bigint(20) NOT NULL AUTO_INCREMENT,
                amount varchar(20) NOT NULL,
                sender varchar(100) NOT NULL,
                transaction_id varchar(50) NOT NULL UNIQUE,
                current_balance varchar(20),
                reference varchar(50),
                transaction_fee varchar(20),
                received_at datetime DEFAULT CURRENT_TIMESTAMP,
                PRIMARY KEY (id)
            ) $charset;";
            require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
            dbDelta($sql);
        }
        register_activation_hook(__FILE__, 'swiftclaim_create_table');