Webhooks - PHP中的认证类型Api密钥-秘密名称和秘密值

Question

我正在尝试使用api密钥(秘密名称和秘密值)验证webhook。所以我创建了两个文件:

webhook.php:

<?php 
include('webhook-api-key.php');
// Retrieve the request body from the webhook POST request
if ($http_status_code === 200){
$request_body = file_get_contents('php://input');
// Convert the request body from JSON to a PHP object
$request_data = json_decode($request_body);
// Extract the contact properties from the request data
$contact_properties = $request_data->properties;
// Extract the email property value
$email = $contact_properties->email->value;
// Extract the first name property value
$first_name = $contact_properties->firstname->value;
// Extract the last name property value
$last_name = $contact_properties->lastname->value;
// Do something with the contact data, such as adding it to a database or sending an email notification
// For example:
$contact_data = array(
'email' => $email,
'first_name' => $first_name,
'last_name' => $last_name
);
// Add the contact data to a database or send an email notification, etc.
// Send a HTTP response to HubSpot indicating that the webhook was successfully received and processed
http_response_code(200);
}
?>

和webhook-api-key.php:

<?php 
$endpoint_url = 'https:/.../hubspot/webhook.php';
// Set up the API key secret name and secret value
$api_key_secret_name = 'word';
$api_key_secret_value = 'anther_word';
// Set up the HTTP POST request headers
$headers = array(
'Content-Type: application/json',
'Authorization: Bearer '.$api_key_secret_value
);
// Set up the HTTP POST request body
$body = array(
'api_key' => $api_key_secret_value
);
// Send the HTTP POST request to the webhook endpoint URL
$ch = curl_init($endpoint_url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($body));
$response = curl_exec($ch);
// Check for errors
if(curl_errno($ch)) {
$error_message = curl_error($ch);
echo 'Error: '.$error_message;
}
// Get the HTTP response status code
$http_status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
// Close the HTTP POST request
curl_close($ch);
// Handle the webhook response
if ($http_status_code === 200) {
echo 'Webhook successfully authenticated.';
} else {
echo 'Webhook authentication failed with HTTP status code: ' . $http_status_code;
}
?>

在Hubspot配置中，url是'https:/…/Hubspot/webhook.php'。

这样行吗?我问，因为它杀死了我的服务器，当我试图测试它，我找不到在互联网上使用这种身份验证的例子。

谢谢!

Answer 1

其实很简单。互联网上没有例子，文档也很差，它更多地解释了Hubspot签名而不是API密钥。我最终明白了它是如何工作的，下面是工作代码:

$expectedSecretName = 'word'; // Replace with your expected secret name
$expectedSecretValue = 'another_word'; // Replace with your expected secret value
$requestBody = file_get_contents('php://input');
$data = json_decode($requestBody);
if($_SERVER['HTTP_WORD'] == $expectedSecretValue){
//do something with values
$email = $data->email;
$firstname= $data->firstname;
$lastname= $data->lastname;
}
else{
//not from Hubspot
}