WhatsApp → Wapizap API → Seu Webhook → Sua Aplicação

{
  "event": "message",
  "instanceId": "sua-instancia",
  "timestamp": 1705233000,
  "data": {
    "key": {
      "remoteJid": "5511999999999@s.whatsapp.net",
      "fromMe": false,
      "id": "3EB0XXXXX"
    },
    "message": {
      "conversation": "Olá, preciso de ajuda!"
    },
    "messageTimestamp": 1705233000,
    "pushName": "João Silva"
  }
}

const express = require('express');
const crypto = require('crypto');

const app = express();
app.use(express.json());

const WEBHOOK_SECRET = 'seu_secret_para_validacao';

// Validar assinatura do webhook
function validateSignature(payload, signature) {
  const hash = crypto
    .createHmac('sha256', WEBHOOK_SECRET)
    .update(JSON.stringify(payload))
    .digest('hex');
  return hash === signature;
}

app.post('/webhook/wapizap', (req, res) => {
  const signature = req.headers['x-webhook-signature'];

  // Validar assinatura (recomendado)
  if (!validateSignature(req.body, signature)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  const { event, instanceId, data } = req.body;

  switch (event) {
    case 'message':
      console.log('Nova mensagem de:', data.pushName);
      console.log('Conteúdo:', data.message?.conversation);
      // Processar mensagem...
      break;

    case 'message.ack':
      console.log('Status atualizado:', data.status);
      // 1=enviado, 2=entregue, 3=lido
      break;

    case 'connection.update':
      console.log('Conexão:', data.state);
      // 'open', 'close', 'connecting'
      break;

    default:
      console.log('Evento:', event);
  }

  // Sempre responda com 200 rapidamente
  res.status(200).json({ received: true });
});

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});

from flask import Flask, request, jsonify
import hmac
import hashlib

app = Flask(__name__)
WEBHOOK_SECRET = 'seu_secret_para_validacao'

def validate_signature(payload, signature):
    hash = hmac.new(
        WEBHOOK_SECRET.encode(),
        payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hash == signature

@app.route('/webhook/wapizap', methods=['POST'])
def webhook():
    signature = request.headers.get('X-Webhook-Signature')

    # Validar assinatura (recomendado)
    if not validate_signature(request.get_data(as_text=True), signature):
        return jsonify({'error': 'Invalid signature'}), 401

    data = request.json
    event = data.get('event')

    if event == 'message':
        message_data = data.get('data', {})
        print(f"Nova mensagem de: {message_data.get('pushName')}")
        print(f"Conteúdo: {message_data.get('message', {}).get('conversation')}")

    elif event == 'message.ack':
        print(f"Status atualizado: {data.get('data', {}).get('status')}")

    elif event == 'connection.update':
        print(f"Conexão: {data.get('data', {}).get('state')}")

    return jsonify({'received': True}), 200

if __name__ == '__main__':
    app.run(port=3000)

# Instalar ngrok
npm install -g ngrok

# Criar túnel
ngrok http 3000

# Use a URL gerada (ex: https://abc123.ngrok.io)

# Instalar cloudflared
brew install cloudflared

# Criar túnel
cloudflared tunnel --url http://localhost:3000