Store API

const express = require('express')const { verifyTanqory } = require('./verify')const app = express()const seen = new Set() // keep handled keys in your database in production// express.raw keeps the exact bytes the signature coversapp.post('/webhooks/tanqory', express.raw({ type: 'application/json' }), (req, res) => {  const ok = verifyTanqory(req.body, req.get('X-Tanqory-Signature'), process.env.TANQORY_WEBHOOK_SECRET)  if (!ok) return res.sendStatus(400)  const event = JSON.parse(req.body)  if (seen.has(event.idempotencyKey)) return res.sendStatus(200) // already handled  seen.add(event.idempotencyKey)  res.sendStatus(200) // answer first: 2xx within 30 seconds  setImmediate(() => handle(req.get('X-Tanqory-Topic'), event)) // then do the work})app.listen(3000)

import jsonimport osimport queuefrom flask import Flask, requestfrom verify import verify_tanqoryapp = Flask(__name__)jobs = queue.Queue()  # a worker drains this; use your job queue in productionseen = set()  # keep handled keys in your database in production@app.post("/webhooks/tanqory")def tanqory_webhook():    raw = request.get_data()  # the exact bytes the signature covers    header = request.headers.get("X-Tanqory-Signature", "")    if not verify_tanqory(raw, header, os.environ["TANQORY_WEBHOOK_SECRET"]):        return "", 400    event = json.loads(raw)    if event["idempotencyKey"] in seen:        return "", 200  # already handled    seen.add(event["idempotencyKey"])    jobs.put((request.headers.get("X-Tanqory-Topic"), event))  # work after    return "", 200  # 2xx within 30 seconds

# The Store API answers on api.tanqory.com for every storecurl -X POST https://api.tanqory.com/v1/stores/$STORE_ID/notifications/webhooks \  -H "Authorization: Bearer $TANQORY_API_KEY" \  -H "Content-Type: application/json" \  -d '{    "event": "orders/paid",    "format": "JSON",    "url": "https://example.com/webhooks/tanqory",    "apiVersion": "2025-01"  }'

mutation {  webhookSubscriptionCreate(    input: {      url: "https://example.com/webhooks/tanqory"      topics: ["orders/paid"]      apiVersion: "2025-01"    }  ) {    subscription { id topics status }    userErrors { field message }    secret # returned once: store it now  }}