from vectrade import VecTrade

client = VecTrade()

webhook = client.webhooks.create(
    url="https://your-app.com/api/webhooks/vectrade",
    events=["price.alert", "news.published"],
    symbols=["AAPL", "GOOGL", "MSFT"],
)

# Save the signing secret securely
print(f"Webhook ID: {webhook.id}")
print(f"Secret: {webhook.secret}")  # Only shown once!

const webhook = await client.webhooks.create({
  url: 'https://your-app.com/api/webhooks/vectrade',
  events: ['price.alert', 'news.published'],
  symbols: ['AAPL', 'GOOGL', 'MSFT'],
});

console.log(`Secret: ${webhook.secret}`);

from vectrade import Webhooks

# In your webhook handler
def handle_webhook(request):
    payload = request.body
    signature = request.headers["X-VQ-Signature"]
    timestamp = request.headers["X-VQ-Timestamp"]

    is_valid = Webhooks.verify(
        payload=payload,
        signature=signature,
        timestamp=timestamp,
        secret="whsec_your_webhook_secret",
    )

    if not is_valid:
        return Response(status=401)

    event = json.loads(payload)
    # Process event...

import { verifyWebhook } from '@vectrade/sdk';

export async function POST(req: Request) {
  const payload = await req.text();
  const signature = req.headers.get('X-VQ-Signature')!;
  const timestamp = req.headers.get('X-VQ-Timestamp')!;

  const isValid = await verifyWebhook({
    payload,
    signature,
    timestamp,
    secret: process.env.WEBHOOK_SECRET!,
  });

  if (!isValid) {
    return new Response('Invalid signature', { status: 401 });
  }

  const event = JSON.parse(payload);
  // Process event...
}