Processing webhooks on your server

{
  "event_type": "DOCUMENT_CREATE_FINISHED",
  "resource_id": "doc_2N0X2g4f3b1JJU75fqzDZs"
}

# Import the Inkit Python library
import inkit
from inkit.exceptions import InkitResponseException
# Import Flask (https://flask.palletsprojects.com/en/2.3.x/)
from flask import Flask, request, abort
# Import HMAC cryptography library
import hmac
# Import SHA-2 hash library
from hashlib import sha256
# Import JSON library
import json

# Replace the string below with your API key
inkit.api_token = "ENTER YOUR API KEY"

# Replace the string below with your webhook secret key
secret = "ENTER YOUR WEBHOOK SECRET KEY"

app = Flask(__name__)
# Set the webhook server path and associate method with route
@app.route('/webhook', methods=['POST'])
def get_webhook():
    if request.method == 'POST':   
        
        # Check if signature generated from secret key matches header signature
        header_signature = request.headers.get('Inkit-Signature')
        secret_signature = hmac.new(key = secret.encode('utf-8'),
                                    msg = request.get_data(),
                                    digestmod = sha256
                                    ).hexdigest()
        # Return a 401 error if the signatures don't match
        if header_signature != secret_signature:
            print('Invalid signature!')
            abort(401)
        
        # Get the webhook object
        data = request.json
        # Process webhook based on the event type
        match data['event_type']:
            case 'DOCUMENT_CREATE_FINISHED':
                # Get data about the generated document
                resp = inkit.Document.get(data['resource_id'])
                # Print the data
                print(json.dumps(resp.data, indent = 3))
    
        return 'success', 200
    else:
        abort(400)
  
# Run the webhook listener
if __name__ == '__main__':
    app.run()