Alertas e reencaminhamento

// routes/api.php
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;

Route::post('/nways/events', function (Request $request) {
    $raw = $request->getContent();
    parse_str(str_replace(',', '&', $request->header('X-NWays-Signature', '')), $sig);
    if (abs(time() - (int) ($sig['t'] ?? 0)) > 300) {
        abort(401);
    }
    $want = hash_hmac('sha256', ($sig['t'] ?? '') . '.' . $raw, config('services.nways.webhook_secret'));
    if (! hash_equals($want, $sig['v1'] ?? '')) {
        abort(401);
    }
    $event = json_decode($raw, true);
    if ($event['type'] === 'asset.geofence_exit') {
        \Log::warning('Left its area', $event['data']['alert']);
    }
    return response()->noContent();
});

import { createHmac, timingSafeEqual } from 'node:crypto'
import { createServer } from 'node:http'

const SECRET = process.env.NWAYS_WEBHOOK_SECRET

function verified(raw, header) {
  const parts = Object.fromEntries(header.split(',').map((p) => p.split('=')))
  if (Math.abs(Date.now() / 1000 - Number(parts.t)) > 300) return false
  const want = createHmac('sha256', SECRET).update(`${parts.t}.${raw}`).digest('hex')
  return want.length === parts.v1?.length && timingSafeEqual(Buffer.from(want), Buffer.from(parts.v1))
}

createServer((req, res) => {
  let raw = ''
  req.on('data', (c) => (raw += c))
  req.on('end', () => {
    if (!verified(raw, req.headers['x-nways-signature'] ?? '')) return res.writeHead(401).end()
    const event = JSON.parse(raw)
    if (event.type.startsWith('asset.')) console.log(event.type, event.data.alert?.vehicleName)
    res.writeHead(204).end()
  })
}).listen(8080)

import hashlib
import hmac
import os
import time

from flask import Flask, abort, request

app = Flask(__name__)
SECRET = os.environ["NWAYS_WEBHOOK_SECRET"].encode()


@app.post("/nways/events")
def events():
    raw = request.get_data()
    parts = dict(p.split("=", 1) for p in request.headers.get("X-NWays-Signature", "").split(",") if "=" in p)
    if abs(time.time() - int(parts.get("t", 0))) > 300:
        abort(401)
    want = hmac.new(SECRET, parts["t"].encode() + b"." + raw, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(want, parts.get("v1", "")):
        abort(401)
    event = request.get_json()
    if event["type"] == "asset.silent":
        print("Gone silent:", event["data"]["alert"]["vehicleName"])
    return "", 204

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"encoding/json"
	"io"
	"math"
	"net/http"
	"os"
	"strconv"
	"strings"
	"time"
)

var secret = []byte(os.Getenv("NWAYS_WEBHOOK_SECRET"))

func verified(raw []byte, header string) bool {
	parts := map[string]string{}
	for _, p := range strings.Split(header, ",") {
		if k, v, ok := strings.Cut(p, "="); ok {
			parts[k] = v
		}
	}
	t, err := strconv.ParseInt(parts["t"], 10, 64)
	if err != nil || math.Abs(float64(time.Now().Unix()-t)) > 300 {
		return false
	}
	m := hmac.New(sha256.New, secret)
	m.Write([]byte(parts["t"] + "."))
	m.Write(raw)
	return hmac.Equal([]byte(hex.EncodeToString(m.Sum(nil))), []byte(parts["v1"]))
}

func main() {
	http.HandleFunc("POST /nways/events", func(w http.ResponseWriter, r *http.Request) {
		raw, _ := io.ReadAll(io.LimitReader(r.Body, 1<<20))
		if !verified(raw, r.Header.Get("X-NWays-Signature")) {
			http.Error(w, "bad signature", http.StatusUnauthorized)
			return
		}
		var ev struct {
			Type string          `json:"type"`
			Data json.RawMessage `json:"data"`
		}
		_ = json.Unmarshal(raw, &ev)
		w.WriteHeader(http.StatusNoContent)
	})
	http.ListenAndServe(":8080", nil)
}

{
  "id": "evt_9mT2qfX4LwP0aZk1sYb7",
  "type": "asset.geofence_exit",
  "version": "2026-10-16",
  "createdAt": "2026-10-16T09:42:11Z",
  "data": {
    "alert": {
      "id": "alr_5c1e2b7a90d4",
      "ruleId": "rule_lagoon",
      "ruleName": "Boats stay on their route",
      "kind": "geofence_exit",
      "vehicleId": "boat-02",
      "vehicleName": "Boat 2",
      "state": "active",
      "detail": { "taskId": "FERRY-7", "area": "dispatch", "position": { "lat": 6.4489, "lng": 3.4542 }, "at": "2026-10-16T09:42:05Z" },
      "startedAt": "2026-10-16T09:42:05Z",
      "notifications": 1
    }
  }
}

{
  "id": "evt_Qe8sNw1rT6yU3iO0pLk2",
  "type": "asset.geofence_enter",
  "version": "2026-10-16",
  "createdAt": "2026-10-16T10:05:40Z",
  "data": {
    "alert": {
      "id": "alr_77b0f1c2e3a4",
      "ruleId": "rule_market",
      "ruleName": "Into Balogun market",
      "kind": "geofence_enter",
      "vehicleId": "bike-11",
      "vehicleName": "Bike 11",
      "subject": "zone:balogun",
      "state": "active",
      "detail": { "zoneId": "balogun", "zoneName": "Balogun market", "position": { "lat": 6.4592, "lng": 3.3898 }, "at": "2026-10-16T10:05:37Z" },
      "startedAt": "2026-10-16T10:05:37Z",
      "notifications": 1
    }
  }
}

{
  "id": "evt_Hb3vC7xZ0mQ9wE4rT1yU",
  "type": "asset.silent",
  "version": "2026-10-16",
  "createdAt": "2026-10-16T11:31:02Z",
  "data": {
    "alert": {
      "id": "alr_0a9b8c7d6e5f",
      "ruleId": "rule_silent",
      "ruleName": "Anyone silent for 30 min",
      "kind": "silent",
      "vehicleId": "bike-04",
      "vehicleName": "Bike 4",
      "state": "active",
      "detail": { "lastSeenAt": "2026-10-16T11:00:58Z", "silentS": 1800, "position": { "lat": 6.6018, "lng": 3.3515 } },
      "startedAt": "2026-10-16T11:31:00Z",
      "notifications": 1
    }
  }
}

{
  "id": "evt_Lp6kJ2hG8fD4sA0zX3cV",
  "type": "asset.idle",
  "version": "2026-10-16",
  "createdAt": "2026-10-16T13:20:15Z",
  "data": {
    "alert": {
      "id": "alr_1f2e3d4c5b6a",
      "ruleId": "rule_idle",
      "ruleName": "Stopped 20 min outside the depot",
      "kind": "idle",
      "vehicleId": "van-01",
      "vehicleName": "Van 1",
      "state": "active",
      "detail": { "since": "2026-10-16T13:00:09Z", "idleS": 1200, "radiusM": 50, "position": { "lat": 6.5244, "lng": 3.3792 } },
      "startedAt": "2026-10-16T13:20:10Z",
      "notifications": 1
    }
  }
}

{
  "id": "evt_Ys5tR8eW2qA6zX9cV1bN",
  "type": "asset.alert_resolved",
  "version": "2026-10-16",
  "createdAt": "2026-10-16T13:41:00Z",
  "data": {
    "alert": { "id": "alr_1f2e3d4c5b6a", "kind": "idle", "ruleId": "rule_idle" },
    "resolvedAt": "2026-10-16T13:41:00Z",
    "auto": true
  }
}