Receive tracking event

import crypto from 'node:crypto';import express from 'express';const app = express();const secret = process.env.TIMETOCARGO_WEBHOOK_SECRET;if (!secret) {    throw new Error('TIMETOCARGO_WEBHOOK_SECRET is not set');}function queueWebhook(payload: unknown): void {    // Enqueue the event, save it to your database,    // or pass it to another service for processing.    console.log('Webhook received from TimeToCargo:', payload);}app.post('/webhooks/timetocargo', express.raw({ type: 'application/json' }), (req, res) => {    const timestamp = req.header('x-timetocargo-timestamp');    const signature = req.header('x-timetocargo-signature');    if (!timestamp || !signature) {        return res.sendStatus(401);    }    const expected =        'sha256=' + crypto.createHmac('sha256', secret).update(timestamp).update('.').update(req.body).digest('hex');    const signatureBuffer = Buffer.from(signature);    const expectedBuffer = Buffer.from(expected);    if (signatureBuffer.length !== expectedBuffer.length || !crypto.timingSafeEqual(signatureBuffer, expectedBuffer)) {        return res.sendStatus(401);    }    const payload = JSON.parse(req.body.toString('utf8'));    queueWebhook(payload);    return res.sendStatus(200);});app.listen(3000, () => {    console.log('Webhook server is running on port 3000');});

import hmacimport hashlibimport osfrom fastapi import FastAPI, Request, HTTPExceptionapp = FastAPI()secret = os.environ["TIMETOCARGO_WEBHOOK_SECRET"].encode()def enqueue_webhook(payload: dict) -> None:    # Enqueue the event, save it to your database,    # or pass it to another service for processing.    print("Webhook received from TimeToCargo:", payload)@app.post("/webhooks/timetocargo")async def timetocargo_webhook(request: Request):    body = await request.body()    timestamp = request.headers.get("x-timetocargo-timestamp")    signature = request.headers.get("x-timetocargo-signature")    if not timestamp or not signature:        raise HTTPException(status_code=401)    digest = hmac.new(        secret,        timestamp.encode() + b"." + body,        hashlib.sha256,    ).hexdigest()    expected = f"sha256={digest}"    if not hmac.compare_digest(signature, expected):        raise HTTPException(status_code=401)    payload = await request.json()    enqueue_webhook(payload)    return {"ok": True}