Webhook: доставка лидов в вашу CRM

$expected = getenv('SWS_WEBHOOK_SECRET');
$header   = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
$token    = preg_replace('/^Bearer\s+/i', '', $header);

if (!hash_equals($expected, $token)) {
    http_response_code(401);
    exit;
}

const crypto = require("crypto");

function verify(req) {
  const expected = process.env.SWS_WEBHOOK_SECRET;
  const token = (req.headers.authorization || "").replace(/^Bearer\s+/i, "");
  const a = Buffer.from(token);
  const b = Buffer.from(expected);
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

import hmac  # только compare_digest — сравнение строк за
import os    # константное время; HMAC-подписи здесь нет

def verify(request) -> bool:
    expected = os.environ["SWS_WEBHOOK_SECRET"]
    header = request.headers.get("Authorization", "")
    token = header.removeprefix("Bearer ").strip()
    return hmac.compare_digest(expected, token)

{
  "event": "lead.qualified",
  "event_id": "5f3b2c9a-1d4e-4a7b-9c2f-8e6d0a1b2c3d",
  "api_version": "1",
  "sent_at": "2026-07-16T09:12:34.567Z",
  "organization_id": 2,
  "agent": {
    "id": 21,
    "name": "Фитнес — чат"
  },
  "lead": {
    "id": 461,
    "url": "https://salesworkshop.ai/leads/461",
    "channel": "telegram",
    "type": "new",
    "status": "active",
    "is_hot": true,
    "summary": "Интересует годовой абонемент в клуб на Ленина, спрашивал про бассейн и рассрочку. Готов на пробную тренировку в выходные.",
    "next_step": "Записать на пробную тренировку в субботу",
    "created_at": "2026-07-16T08:40:00.000Z",
    "direction": "inbound",
    "click_id": null,
    "click_source": null,
    "start_param": "summer_promo",
    "qualification": {
      "current_situation": "Ходит в зал у дома, не устраивает оборудование",
      "volume": "Годовой абонемент, 1 человек",
      "goals": "Похудеть к лету, нужен бассейн",
      "timeline": "Готов купить на этой неделе",
      "budget_level": "до 40 000 ₽"
    },
    "custom_attributes": [
      {
        "key": "club",
        "label": "Клуб",
        "type": "ENUM",
        "is_multiple": false,
        "value": "Ленина"
      },
      {
        "key": "membership",
        "label": "Абонемент",
        "type": "STRING",
        "is_multiple": false,
        "value": "Годовой"
      },
      {
        "key": "promised_budget",
        "label": "Бюджет",
        "type": "MONEY",
        "is_multiple": false,
        "value": 40000
      },
      {
        "key": "trial_date",
        "label": "Дата пробной",
        "type": "DATE",
        "is_multiple": false,
        "value": "2026-07-18"
      },
      {
        "key": "interests",
        "label": "Интересы",
        "type": "STRING",
        "is_multiple": true,
        "value": [
          "бассейн",
          "сауна",
          "групповые"
        ]
      }
    ]
  },
  "contact": {
    "first_name": "Иван",
    "last_name": "Петров",
    "phone": "+79991234567",
    "callback_phone": "+79995554433",
    "email": null,
    "telegram": "@ivan_petrov",
    "whatsapp": null,
    "channel_user_id": null,
    "channel_handle_label": null,
    "company": null,
    "role": "unknown",
    "channel": "telegram"
  },
  "updated_fields": [],
  "client_message": null
}

{
  "event": "lead.updated",
  "event_id": "9a8b7c6d-5e4f-4a3b-2c1d-0e9f8a7b6c5d",
  "api_version": "1",
  "sent_at": "2026-09-10T08:37:49.512Z",
  "organization_id": 12,
  "lead": {
    "id": 1880,
    "url": "https://salesworkshop.ai/leads/1880",
    "…": "те же поля, что в lead.qualified"
  },
  "contact": {
    "first_name": "Надежда",
    "phone": null,
    "callback_phone": null,
    "telegram": "@irina_cue",
    "whatsapp": null,
    "channel_user_id": "337709712",
    "channel_handle_label": "MAX",
    "channel": "max",
    "…": "те же поля, что в lead.qualified"
  },
  "updated_fields": [
    "first_name",
    "telegram"
  ],
  "client_message": "@irina_cue"
}

{
  "event": "webhook.test",
  "event_id": "d3c1a2b4-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
  "api_version": "1",
  "sent_at": "2026-07-19T10:00:00.000Z",
  "message": "Тестовое событие от Sales Workshop AI. Подключение webhook работает."
}