Webhooks

curl -X POST https://registry.yourcompany.com/v1/workspaces/ws_ID/webhooks \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-app.com/webhooks/gameframework",
    "events": ["version.published", "download.completed"],
    "secret": "your_webhook_secret"
  }'

{
  "event": "version.published",
  "timestamp": "2025-01-10T14:30:00Z",
  "workspace_id": "ws_123",
  "package": {
    "id": "pkg_456",
    "name": "my_package",
    "version": "1.2.0"
  },
  "user": {
    "id": "usr_789",
    "email": "dev@company.com"
  }
}

import 'dart:convert';
import 'package:crypto/crypto.dart';

bool verifyWebhook(String payload, String signature, String secret) {
  final hmac = Hmac(sha256, utf8.encode(secret));
  final digest = hmac.convert(utf8.encode(payload));
  final expected = 'sha256=${digest.toString()}';
  return signature == expected;
}